Sploitus

32 exploited vulnerabilities in Foxit Reader

Vulnerabilities with publicly known exploits

Vendors
Foxit, Foxitsoftware
With known exploits
32
Affected Foxit Pdf Reader versions
= 2025.1.0.27937, 2024.1.0.23997, 12.1.2.15332, 2024.2.1.25153, 2025.3.0.35737, 2.0
Affected Foxit Pdf Editor versions
≤ 11.2.8.53842, 12.1.4.15400, 13.0.1.21693, 2023.3.0.23028, 2024.1.0.23997, 11.2.9.53938, 12.1.6.15509, 13.1.1.22432, 2024.2.1.25153, 13.2.2.24014, 14.0.2.33402, 2024.4.1.27687, 2025.3.0.35737
Affected Foxitsoftware Foxit Reader versions
= 12.1.3.15356, 12.1.2.15356, 9.2, 10.1.0.37527, 3.2.0.0303, 2.3, 3.0, 3.1.0.0824, 3.1.1.0901, 3.1.1.0928, 3.1.3.1030, 9.0.1.1049, 8.2.0.2051, 10.0.0, 8.3.2.25013, 9.3.0.10826, 6.1, 6.1.2, 6.1.4, 6.2, 6.2.1, 7.0, 7.0.6, 7.1.3.320, 7.0.6.1126
Affected Foxit reader3.0 versions
All versions
Affected Foxitsoftware Reader versions
= 2.3, 3.0
Affected Foxitsoftware Phantompdf versions
< 9.2, 9.0.1.1049, 7.1.3.320, 7.0.6.1126
Affected Foxit Software Reader versions
= 2.2
Affected Foxitsoftware Enterprise Reader versions
≤ 7.1.3.320, 7.0.6.1126

Vulnerabilities with exploits

Highest CVSS first — 12 of these already have exploit code on Sploitus

CVE-2025-32451
CVSS 10.0 HIGH 2025-05-18
CVE-2024-25575
CVSS 10.0 HIGH 2024-04-01FIX AVAILABLE
CVE-2024-25938
CVSS 10.0 HIGH 2024-04-01
CVE-2024-25648
CVSS 10.0 HIGH 2024-04-01
CVE-2023-35985
CVSS 10.0 HIGH 2023-11-22
CVE-2023-39542
CVSS 10.0 HIGH 2023-11-27FIX AVAILABLE
CVE-2023-38573
CVSS 10.0 HIGH 2023-11-27FIX AVAILABLE
CVE-2023-32664
CVSS 10.0 HIGH 2023-07-19
CVE-2023-33876
CVSS 10.0 HIGH 2023-07-19
CVE-2009-0837 4 exploits
CVSS 10.0 HIGH 2009-03-10FIX AVAILABLE
Foxit Reader 3.0 - Open Execute Action Stack Buffer Overflow (Metasploit)Foxit Reader 3.0 (Build 1301) - PDF Universal Buffer Overflow
CVE-2009-0836 3 exploits
CVSS 10.0 HIGH 2009-03-10FIX AVAILABLE
Foxit Reader Authorization BypassFoxit Reader PDF文件处理多个代码执行和绕过授权漏洞
CVE-2018-14442
CVSS 9.8 CRITICAL 2018-07-20FIX AVAILABLE
CVE-2023-32616
CVSS 9.7 HIGH 2023-11-27FIX AVAILABLE
CVE-2020-13548
CVSS 9.3 HIGH 2020-12-09
CVE-2010-1239 1 exploit
CVSS 9.3 HIGH 2010-04-05FIX AVAILABLE
Adobe Reader - Escape From '.PDF' Execute Embedded Executable
CVE-2024-28888
CVSS 8.8 HIGH 2024-09-30
CVE-2018-9958 14 exploits
CVSS 8.8 HIGH 2018-04-20
Foxit Reader 9.0.1.1049 - Arbitrary Code Execution ExploitFoxit Reader 9.0.1.1049 - Arbitrary Code Execution
CVE-2017-10952 1 exploit
CVSS 8.8 HIGH 2017-08-17
Foxit Reader command injection(CVE-2017-10951)and file writing Vulnerability(CVE-2017-10952)
CVE-2024-29072
CVSS 8.2 HIGH 2024-05-28FIX AVAILABLE
CVE-2026-3780 1 exploit
CVSS 7.8 HIGH 2026-03-31
Exploit for Uncontrolled Search Path Element in Foxit Pdf_Editor
CVE-2020-14425 2 exploits
CVSS 7.8 HIGH 2020-11-02FIX AVAILABLE
Foxit Reader 9.7.1 - Remote Command Execution (Javascript API)Foxit Reader 9.7.1 Remote Command Execution
CVE-2018-9948 11 exploits
CVSS 7.8 HIGH 2018-01-12
Foxit PDF Reader 9.0.1.1049 - Pointer Overwrite Use-After-Free (Metasploit)Foxit PDF Reader 9.0.1.1049 Pointer Overwrite Use-After-Free Exploit
CVE-2017-14694
CVSS 7.8 HIGH 2017-09-22FIX AVAILABLE
CVE-2008-1942
CVSS 6.8 MEDIUM 2008-04-24
CVE-2017-16584
CVSS 6.5 MEDIUM 2017-11-14
CVE-2018-19390
CVSS 5.5 MEDIUM 2018-11-20
CVE-2018-19389
CVSS 5.5 MEDIUM 2018-11-20FIX AVAILABLE
CVE-2018-19388
CVSS 5.5 MEDIUM 2018-11-20
CVE-2007-2186 1 exploit
CVSS 5.0 MEDIUM 2007-04-24
Foxit Reader 2.0 - 'PDF' Remote Denial of Service
CVE-2015-2789 2 exploits
CVSS 4.4 MEDIUM 2015-03-30FIX AVAILABLE
Foxit Reader 7.0.6.1126 - Unquoted Service Path Privilege EscalationFoxit Reader 7.0.6.1126 Unquoted Service Path Elevation Of Privilege
CVE-2015-3632 1 exploit
CVSS 4.3 MEDIUM 2015-05-01FIX AVAILABLE
Foxit Reader PDF 7.1.3.320 - Parsing Memory Corruption
CVE-2015-2790 2 exploits
CVSS 4.3 MEDIUM 2015-03-30FIX AVAILABLE
Foxit Products GIF Conversion - 'LZWMinimumCodeSize' Memory CorruptionFoxit Products GIF Conversion - 'DataSubBlock' Memory Corruption