# cve.now: Foxit Software Inc.

The newest entries naming Foxit Software Inc. as an affected vendor (up to 200), of 120 in all, 0 known exploited. Older ones are in the full catalog at https://cve.now/latest.md.

- [CVE-2026-119432](https://cve.now/CVE-2026-119432.md): Foxit Workspace Stored XSS in shared artifacts (CVSS 8.7)
- [CVE-2026-119431](https://cve.now/CVE-2026-119431.md): Server-Side Request Forgery in Foxit Workspace File Upload (CVSS 7.7)
- [CVE-2026-119433](https://cve.now/CVE-2026-119433.md): Server-Side Request Forgery in Foxit Workspace PDF Export (CVSS 7.7)
- [CVE-2026-111417](https://cve.now/CVE-2026-111417.md): Cross-user Document Access on Foxit Official Website's HTML-to-PDF Service (CVSS 7.5)
- [CVE-2026-111418](https://cve.now/CVE-2026-111418.md): SSRF and JavaScript Execution in the Foxit Official Website's HTML-to-PDF Service (CVSS 7.5)
- [CVE-2026-111419](https://cve.now/CVE-2026-111419.md): Hardcoded API Token in Foxit Official Website (CVSS 8.6)
- [CVE-2026-91788](https://cve.now/CVE-2026-91788.md): Foxit PDF Editor/Reader Missing Authorization Information Disclosure Vulnerability (CVSS 4.7)
- [CVE-2026-91790](https://cve.now/CVE-2026-91790.md): Foxit PDF Editor/Reader Doc Object Use-After-Free Information Disclosure Vulnerability (CVSS 7.8)
- [CVE-2026-91791](https://cve.now/CVE-2026-91791.md): Foxit PDF Editor/Reader Annotation Use-After-Free Remote Code Execution Vulnerability (CVSS 7.8)
- [CVE-2026-91792](https://cve.now/CVE-2026-91792.md): Foxit PDF Editor/Reader Annotation Use-After-Free Remote Code Execution Vulnerability (CVSS 7.8)
- [CVE-2026-91793](https://cve.now/CVE-2026-91793.md): Foxit PDF Editor/Reader Doc Object Use-After-Free Information Disclosure Vulnerability (CVSS 7.8)
- [CVE-2026-91794](https://cve.now/CVE-2026-91794.md): Foxit PDF Editor/Reader DeviceN Colorspace Out-Of-Bounds Write Remote Code Execution Vulnerability (CVSS 7.8)
- [CVE-2026-91795](https://cve.now/CVE-2026-91795.md): Foxit PDF Editor/Reader FileOpen Uninitialized Variable Remote Code Execution Vulnerability (CVSS 7.8)
- [CVE-2026-91796](https://cve.now/CVE-2026-91796.md): Foxit PDF Editor/Reader importIcon NTLM Response Information Disclosure Vulnerability (CVSS 6.1)
- [CVE-2026-91797](https://cve.now/CVE-2026-91797.md): Foxit PDF Editor/Reader Portfolio Directory Traversal Remote Code Execution Vulnerability (CVSS 7.8)
- [CVE-2026-91799](https://cve.now/CVE-2026-91799.md): Foxit Editor/Reader Array resetForm Use-After-Free Vulnerability (CVSS 7.8)
- [CVE-2026-91805](https://cve.now/CVE-2026-91805.md): Use-after-free Vulnerability in Foxit PDF Editor/Reader Page-tree Handling (CVSS 7.8)
- [CVE-2026-91800](https://cve.now/CVE-2026-91800.md): Foxit PDF Editor installer local privilege escalation (CVSS 8.8)
- [CVE-2026-91801](https://cve.now/CVE-2026-91801.md): Foxit PDF Editor/Reader RichMedia Annotation Directory Traversal Remote Code Execution Vulnerability (CVSS 7.8)
- [CVE-2026-91802](https://cve.now/CVE-2026-91802.md): Foxit PDF Editor/Reader — Heap Buffer Overflow in WebP Image Decoding via Bitmap Stride Confusion (CVSS 7.8)
- [CVE-2026-91804](https://cve.now/CVE-2026-91804.md): Foxit PDF Editor/Reader Out-of-bounds Write Vulnerability While Rendering (CVSS 7.8)
- [CVE-2026-91806](https://cve.now/CVE-2026-91806.md): Foxit PDF Editor/Reader Doc Object Use-After-Free Information Disclosure Vulnerability (CVSS 7.8)
- [CVE-2026-91807](https://cve.now/CVE-2026-91807.md): Foxit PDF Editor/Reader PDF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability (CVSS 6.1)
- [CVE-2026-91798](https://cve.now/CVE-2026-91798.md): Foxit PDF Editor/Reader Updater Privilege Escalation (CVSS 8.8)
- [CVE-2026-91803](https://cve.now/CVE-2026-91803.md): Security Vulnerability Report – Foxit PDF Editor/Reader Updater DLL Search Path Hijacking (CVSS 8.8)
- [CVE-2026-91808](https://cve.now/CVE-2026-91808.md): Foxit PDF Editor/Reader JPEG File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability (CVSS 6.1)
- [CVE-2026-91810](https://cve.now/CVE-2026-91810.md): Foxit PDF Editor/Reader Doc Object Out-Of-Bounds Read Information Disclosure Vulnerability (CVSS 6.1)
- [CVE-2026-91811](https://cve.now/CVE-2026-91811.md): Foxit PDF Editor/Reader PRC Stream Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability (CVSS 7.8)
- [CVE-2026-91812](https://cve.now/CVE-2026-91812.md): Foxit PDF Editor/Reader FoxitUpdater Improper Certificate Validation Local Privilege Escalation Vulnerability (CVSS 7.9)
- [CVE-2026-91813](https://cve.now/CVE-2026-91813.md): Foxit PDF Editor/Reader FoxitUpdater Race Condition Local Privilege Escalation Vulnerability (CVSS 8.8)
- [CVE-2026-91815](https://cve.now/CVE-2026-91815.md): Foxit PDF Editor/Reader JPEG2000 Parsing Memory Corruption Remote Code Execution Vulnerability (CVSS 7.8)
- [CVE-2026-91814](https://cve.now/CVE-2026-91814.md): Security vulnerability: Foxit PDF Editor/Reader Fails to Detect Modifications to Signed Documents Displaying Newly Added Content (CVSS 5.3)
- [CVE-2026-91816](https://cve.now/CVE-2026-91816.md): Foxit PDF Editor/Reader AcroForm Use-After-Free Remote Code Execution Vulnerability (CVSS 7.8)
- [CVE-2026-91817](https://cve.now/CVE-2026-91817.md): Foxit PDF Editor/Reader AcroForm Out-of-Bounds Read Remote Code Execution Vulnerability (CVSS 6.1)
- [CVE-2026-91818](https://cve.now/CVE-2026-91818.md): Foxit PDF Editor/Reader Annotation Use-After-Free Remote Code Execution Vulnerability (CVSS 7.8)
- [CVE-2026-91789](https://cve.now/CVE-2026-91789.md): Foxit PDF Editor/Reader U3D File Parsing Integer Overflow Remote Code Execution Vulnerability (CVSS 7.8)
- [CVE-2026-91809](https://cve.now/CVE-2026-91809.md): Foxit PDF Editor/Reader Annotation Use-After-Free Information Disclosure Vulnerability (CVSS 7.8)
- [CVE-2026-18622](https://cve.now/CVE-2026-18622.md): Foxit PDF Editor/Reader's signature-validation pop-up reports modified certified documents as valid (CVSS 4.7)
- [CVE-2026-18597](https://cve.now/CVE-2026-18597.md): Blind SSRF on Foxit PDF Services API (CVSS 8.5)
- [CVE-2026-13126](https://cve.now/CVE-2026-13126.md): Foxit PDF Editor/Reader Annotation Use-After-Free Remote Code Execution Vulnerability (CVSS 7.8)
- [CVE-2026-13127](https://cve.now/CVE-2026-13127.md): Foxit PDF Editor/Reader Annotation Use-After-Free Remote Code Execution Vulnerability (CVSS 7.8)
- [CVE-2026-13128](https://cve.now/CVE-2026-13128.md): Foxit PDF Editor/Reader Doc Object Use-After-Free Remote Code Execution Vulnerability (CVSS 7.8)
- [CVE-2026-57239](https://cve.now/CVE-2026-57239.md): Foxit PDF Editor/Reader Local Privilege Escalation (CVSS 8.2)
- [CVE-2026-57240](https://cve.now/CVE-2026-57240.md): Foxit PDF Editor/Reader Form Field Use-After-Free Remote Code Execution Vulnerability (CVSS 7.8)
- [CVE-2026-13129](https://cve.now/CVE-2026-13129.md): Foxit PDF Editor/Reader Annotation Use-After-Free Remote Code Execution Vulnerability (CVSS 7.8)
- [CVE-2026-57238](https://cve.now/CVE-2026-57238.md): Foxit PDF Editor/Reader Annotation Use-After-Free Remote Code Execution Vulnerability (CVSS 7.8)
- [CVE-2026-57241](https://cve.now/CVE-2026-57241.md): Foxit PDF Editor/Reader Page Out-of-bounds Read Vulnerability (CVSS 6.1)
- [CVE-2026-57242](https://cve.now/CVE-2026-57242.md): Foxit PDF Editor/Reader Page Use-After-Free Vulnerability (CVSS 7.8)
- [CVE-2026-57243](https://cve.now/CVE-2026-57243.md): Foxit PDF Editor/Reader Page Out-of-bounds Read Vulnerability (CVSS 6.1)
- [CVE-2026-57245](https://cve.now/CVE-2026-57245.md): Foxit PDF Editor/Reader Signature Hyperlink Use-After-Free Vulnerability (CVSS 7.8)
- [CVE-2026-57246](https://cve.now/CVE-2026-57246.md): Foxit PDF Editor/Reader Signature Buffer Overflow Vulnerability (CVSS 7.8)
- [CVE-2026-57248](https://cve.now/CVE-2026-57248.md): Foxit PDF Editor/Reader Annotation Improper Release Vulnerability (CVSS 7.8)
- [CVE-2026-57249](https://cve.now/CVE-2026-57249.md): Foxit PDF Editor/Reader Annotation Use-After-Free Vulnerability (CVSS 7.8)
- [CVE-2026-57251](https://cve.now/CVE-2026-57251.md): Foxit PDF Editor/Reader Cloud Appearance Buffer Overflow Vulnerability (CVSS 7.8)
- [CVE-2026-57253](https://cve.now/CVE-2026-57253.md): Foxit PDF Editor/Reader PDF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability (CVSS 6.1)
- [CVE-2026-57252](https://cve.now/CVE-2026-57252.md): Foxit PDF Editor/Reader AcroForm Use-After-Free Remote Code Execution Vulnerability (CVSS 7.8)
- [CVE-2026-57254](https://cve.now/CVE-2026-57254.md): Foxit PDF Editor/Reader Annotation Type Confusion Vulnerability (CVSS 7.8)
- [CVE-2026-57255](https://cve.now/CVE-2026-57255.md): Security vulnerability in Foxit PDF Editor/Reader — OOB Read via NaN-Bypass Clamp (CVSS 6.1)
- [CVE-2026-57259](https://cve.now/CVE-2026-57259.md): Foxit PDF Editor/Reader XDP XFA XXE arbitrary local file read (CVSS 6.5)
- [CVE-2026-57237](https://cve.now/CVE-2026-57237.md): Foxit PDF Editor/Reader Annotation Use-After-Free Remote Code Execution Vulnerability (CVSS 7.8)
- [CVE-2026-57244](https://cve.now/CVE-2026-57244.md): Foxit PDF Editor/Reader Form Control Use-After-Free Vulnerability (CVSS 7.8)
- [CVE-2026-57247](https://cve.now/CVE-2026-57247.md): Foxit PDF Editor/Reader Field Use-After-Free Vulnerability (CVSS 7.8)
- [CVE-2026-57250](https://cve.now/CVE-2026-57250.md): Foxit PDF Editor/Reader Form Field Use-After-Free Vulnerability (CVSS 7.8)
- [CVE-2026-57256](https://cve.now/CVE-2026-57256.md): Foxit Editor/Reader List Box Format Use-After-Free Vulnerability (CVSS 7.8)
- [CVE-2026-57257](https://cve.now/CVE-2026-57257.md): Security vulnerability in Foxit PDF Editor/Reader — PRC 3D BRep Renderer Heap OOB Read (CVSS 6.1)
- [CVE-2026-57258](https://cve.now/CVE-2026-57258.md): Foxit PDF Editor/Reader Crash via Malformed PRC 3D Stream (CVSS 6.1)
- [CVE-2026-57260](https://cve.now/CVE-2026-57260.md): Security vulnerability in Foxit PDF Editor/Reader — U3D Adobe Mesh Decompression (Type Confusion / Invalid Pointer Dereference) (CVSS 7.8)
- [CVE-2026-12057](https://cve.now/CVE-2026-12057.md): DoS + Remote Code Execution via PDF JavaScript in Foxit AI (CVSS 8.6)
- [CVE-2026-5937](https://cve.now/CVE-2026-5937.md): Foxit PDF Editor/Reader's insufficient parameter validation leads to denial-of-service vulnerability (CVSS 5.5)
- [CVE-2026-5938](https://cve.now/CVE-2026-5938.md): Foxit PDF Editor/Reader Infinite Loop Denial-of-Service Vulnerability (CVSS 5.5)
- [CVE-2026-5940](https://cve.now/CVE-2026-5940.md): Foxit PDF Editor/Reader Annotation Use-After-Free Remote Code Execution Vulnerability (CVSS 7.8)
- [CVE-2026-5942](https://cve.now/CVE-2026-5942.md): Foxit PDF Editor/Reader AcroForm Signature Use-After-Free Vulnerability (CVSS 5.5)
- [CVE-2026-5943](https://cve.now/CVE-2026-5943.md): Foxit PDF Editor/Reader AcroForm Annotation Use-After-Free Remote Code Execution Vulnerability (CVSS 7.8)
- [CVE-2026-5939](https://cve.now/CVE-2026-5939.md): UAF in Foxit PDF Editor/Reader via XFA calculate event (CVSS 5.5)
- [CVE-2026-5941](https://cve.now/CVE-2026-5941.md): Foxit PDF Editor/Reader AcroForm Signature Remote Code Execution Vulnerability (CVSS 7.8)
- [CVE-2026-5936](https://cve.now/CVE-2026-5936.md): Server-Side Request Forgery (SSRF) via URL Parameter in Foxit PDF Services API (CVSS 8.5)
- [CVE-2026-3774](https://cve.now/CVE-2026-3774.md): Self-Modifications Affecting Altered Printing and Redaction in Foxit PDF Editor (CVSS 4.7)
- [CVE-2026-3775](https://cve.now/CVE-2026-3775.md): Foxit PDF Editor/Reader Update Service Uncontrolled Search Path Element Local Privilege Escalation Vulnerability (CVSS 7.8)
- [CVE-2026-3776](https://cve.now/CVE-2026-3776.md): Null pointer dereference in Foxit PDF Editor/Reader when accessing stamp annotation (CVSS 5.5)
- [CVE-2026-3780](https://cve.now/CVE-2026-3780.md): Foxit PDF Editor/Reader Installer Uncontrolled Search Path Privilege Escalation (CVSS 7.3)
- [CVE-2026-3778](https://cve.now/CVE-2026-3778.md): Stack exhaustion caused by cyclic references in Foxit PDF Editor/Reader (CVSS 6.2)
- [CVE-2026-3779](https://cve.now/CVE-2026-3779.md): Foxit PDF Editor/Reader List Box Calculate Array Use-After-Free Vulnerability (CVSS 7.8)
- [CVE-2026-3777](https://cve.now/CVE-2026-3777.md): Use after free of view cache in Foxit PDF Editor/Reader (CVSS 5.5)
- [CVE-2026-4947](https://cve.now/CVE-2026-4947.md): Insecure Direct Object Reference (IDOR) Leading to Signature Forgery in Foxit eSign (CVSS 7.1)
- [CVE-2026-1592](https://cve.now/CVE-2026-1592.md): Stored XSS via Create New Layer Field found in Foxit PDF Editor Cloud (CVSS 6.3)
- [CVE-2026-1591](https://cve.now/CVE-2026-1591.md): Stored XSS via Attachments Feature in https://pdfonline.foxit.com/ (CVSS 6.3)
- [CVE-2025-66523](https://cve.now/CVE-2025-66523.md): Reflected Cross-Site Scripting (XSS) Vulnerability in na1.foxitesign.foxit.com via Unsanitized URL Parameters (CVSS 6.1)
- [CVE-2025-66522](https://cve.now/CVE-2025-66522.md): Foxit pdfonline.foxit.com Stored Cross-Site Scripting in Digital IDs Common Name Field (CVSS 6.3)
- [CVE-2025-66521](https://cve.now/CVE-2025-66521.md): Foxit pdfonline.foxit.com Stored Cross-Site Scripting in Trusted Certificates Feature (CVSS 6.3)
- [CVE-2025-66520](https://cve.now/CVE-2025-66520.md): Foxit pdfonline.foxit.com Stored Cross-Site Scripting in Portfolio SVG Handling (CVSS 6.3)
- [CVE-2025-66519](https://cve.now/CVE-2025-66519.md): Foxit pdfonline.foxit.com Stored Cross-Site Scripting in Layer Import Functionality (CVSS 6.3)
- [CVE-2025-66502](https://cve.now/CVE-2025-66502.md): Foxit pdfonline.foxit.com Stored Cross-Site Scripting in Page Templates Feature (CVSS 6.3)
- [CVE-2025-66501](https://cve.now/CVE-2025-66501.md): Foxit pdfonline.foxit.com Stored Cross-Site Scripting in eSign Predefined Text Feature (CVSS 6.3)
- [CVE-2025-66500](https://cve.now/CVE-2025-66500.md): Foxit webplugins.foxit.com Stored Cross-Site Scripting via postMessage Vulnerability (CVSS 6.3)
- [CVE-2025-66499](https://cve.now/CVE-2025-66499.md): Foxit PDF Reader PDF Parsing Heap-Based Buffer Overflow Remote Code Execution Vulnerability (CVSS 7.8)
- [CVE-2025-66498](https://cve.now/CVE-2025-66498.md): Foxit PDF Reader 3D Annotation Out-of-Bounds Memory Access Vulnerability (CVSS 5.3)
- [CVE-2025-66497](https://cve.now/CVE-2025-66497.md): Foxit PDF Reader 3D Annotation Out-of-Bounds Memory Access Vulnerability (CVSS 5.3)
- [CVE-2025-66496](https://cve.now/CVE-2025-66496.md): Foxit PDF Reader 3D Annotation Out-of-Bounds Memory Access Vulnerability (CVSS 5.3)
- [CVE-2025-66495](https://cve.now/CVE-2025-66495.md): Foxit PDF Reader Annotation Use-After-Free Remote Code Execution Vulnerability (CVSS 7.8)
- [CVE-2025-66494](https://cve.now/CVE-2025-66494.md): Foxit PDF Reader PDF File Parsing Use-After-Free Remote Code Execution Vulnerability (CVSS 7.8)
- [CVE-2025-66493](https://cve.now/CVE-2025-66493.md): Foxit PDF Reader AcroForm Use-After-Free Remote Code Execution Vulnerability (CVSS 7.8)
- [CVE-2025-13941](https://cve.now/CVE-2025-13941.md): Foxit PDF Reader Update Service Incorrect Permission Assignment Local Privilege Escalation Vulnerability (CVSS 8.8)
- [CVE-2010-20010](https://cve.now/CVE-2010-20010.md): Foxit PDF Reader \< 4.2.0.0928 Title Stack Buffer Overflow (CVSS 8.4)
- [CVE-2011-10030](https://cve.now/CVE-2011-10030.md): Foxit PDF Reader \< 4.3.1.0218 JavaScript File Write (CVSS 8.4)
- [CVE-2018-3997](https://cve.now/CVE-2018-3997.md): An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Software's Foxit PDF Reader, version 9.2.0.9297. (CVSS 8.0)
- [CVE-2018-3996](https://cve.now/CVE-2018-3996.md): An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Software's PDF Reader, version 9.2.0.9297. (CVSS 8.0)
- [CVE-2018-3992](https://cve.now/CVE-2018-3992.md): An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Software's Foxit PDF Reader, version 9.2.0.9297. (CVSS 8.0)
- [CVE-2018-3945](https://cve.now/CVE-2018-3945.md): An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Software's Foxit PDF Reader version 9.1.0.5096. (CVSS 8.0)
- [CVE-2018-3942](https://cve.now/CVE-2018-3942.md): An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Software's PDF Reader, version 9.1.0.5096. (CVSS 8.0)
- [CVE-2018-3941](https://cve.now/CVE-2018-3941.md): An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Software's Foxit PDF Reader version 9.1.0.5096. (CVSS 8.0)
- [CVE-2018-3940](https://cve.now/CVE-2018-3940.md): An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Software's PDF Reader, version 9.1.0.5096. (CVSS 8.0)
- [CVE-2018-3995](https://cve.now/CVE-2018-3995.md): An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Software's PDF Reader, version 9.2.0.9297. (CVSS 8.0)
- [CVE-2018-3994](https://cve.now/CVE-2018-3994.md): An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Software's Foxit PDF Reader version 9.2.0.9297. (CVSS 8.0)
- [CVE-2018-3993](https://cve.now/CVE-2018-3993.md): An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Software's Foxit PDF Reader version 9.2.0.9297. (CVSS 8.0)
- [CVE-2018-3967](https://cve.now/CVE-2018-3967.md): An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Software's Foxit PDF Reader version 9.1.0.5096. (CVSS 8.0)
- [CVE-2018-3966](https://cve.now/CVE-2018-3966.md): An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Software's Foxit PDF Reader version 9.1.0.5096. (CVSS 8.0)
- [CVE-2018-3965](https://cve.now/CVE-2018-3965.md): An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Software's Foxit PDF Reader version 9.1.0.5096. (CVSS 8.0)
- [CVE-2018-3964](https://cve.now/CVE-2018-3964.md): An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Software's Foxit PDF Reader version 9.1.0.5096. (CVSS 8.0)
- [CVE-2018-3946](https://cve.now/CVE-2018-3946.md): An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Software's PDF Reader version 9.1.0.5096. (CVSS 8.0)
- [CVE-2016-8334](https://cve.now/CVE-2016-8334.md): A large out-of-bounds read on the heap vulnerability in Foxit PDF Reader can potentially be abused for information disclosure. (CVSS 6.8)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/vendors/foxit-software
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.