In Foxit PDF Reader before 2024.1 and PDF Editor before 2024.1, code execution via JavaScript could occur because of an unoptimized prompt message for users to review parameters of commands.
CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HFoxit Pdf Editor
APPFoxit< 2024.4Foxit Pdf Reader
APPFoxit< 2024.4
π΅
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
RCE
CWE
Related vulnerabilities
CVE-2022-28104CRITICAL9.8ten sam produkt
Foxit PDF Editor v11.3.1 was discovered to contain an arbitrary file upload vulnerability.
CVE-2022-24954CRITICAL9.8ten sam produkt
Foxit PDF Reader before 11.2.1 and Foxit PDF Editor before 11.2.1 have a Stack-Based Buffer Overflow related t...
CVE-2022-24955CRITICAL9.8ten sam produkt
Foxit PDF Reader before 11.2.1 and Foxit PDF Editor before 11.2.1 have an Uncontrolled Search Path Element for...
CVE-2021-38563CRITICAL9.8ten sam produkt
An issue was discovered in Foxit PDF Reader before 11.0.1 and PDF Editor before 11.0.1. It mishandles situatio...
CVE-2026-5940HIGH7.8ten sam produkt
Calling a function that triggers a UI refresh after removing comments via a script may access an invalidated o...