Known vulnerabilities in Foxit PDF Editor (formerly Foxit PhantomPDF) - page 2

Software CPE: cpe:2.3:a:foxit_software:foxit_phantompdf:*:*:*:*:*:*:*:*
Total vulnerabilities: 679
Public exploits: 5
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Foxit PDF Editor (formerly Foxit PhantomPDF) Foxit PDF Editor (formerly Foxit PhantomPDF) is affected by 679 known vulnerabilities: 512 high, 46 medium, 121 low Critical High Medium Low

Vulnerabilities (679)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU151830 - External Control of File Name or Path
CVE-2026-91797
CWE-73 High
No
No
13.2.7.24160, 14.0.8.33807, 2026.2.1.39815 23.09.2026 SB2026092343
#VU151831 - Incorrect Permission Assignment for Critical Resource
CVE-2026-91798
CWE-732 Low
No
No
13.2.7.24160, 14.0.8.33807, 2026.2.1.39815 23.09.2026 SB2026092343
#VU151832 - Uncontrolled Search Path Element
CVE-2026-91803
CWE-427 Low
No
No
13.2.7.24160, 14.0.8.33807, 2026.2.1.39815 23.09.2026 SB2026092343
#VU151833 - Improper Certificate Validation
CVE-2026-91812
CWE-295 Medium
No
No
13.2.7.24160, 14.0.8.33807, 2026.2.1.39815 23.09.2026 SB2026092343
#VU151834 - Time-of-check Time-of-use (TOCTOU) Race Condition
CVE-2026-91813
CWE-367 Low
No
No
13.2.7.24160, 14.0.8.33807, 2026.2.1.39815 23.09.2026 SB2026092343
#VU151835 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-91801
CWE-22 High
No
No
13.2.7.24160, 14.0.8.33807, 2026.2.1.39815 23.09.2026 SB2026092343
#VU151836 - Improper Verification of Cryptographic Signature
CVE-2026-91814
CWE-347 Medium
No
No
13.2.7.24160, 14.0.8.33807, 2026.2.1.39815 23.09.2026 SB2026092343
#VU151827 - Use After Free
CVE-2026-91818
CWE-416 High
No
No
13.2.7.24160, 14.0.8.33807, 2026.2.1.39815 23.09.2026 SB2026092343
#VU151828 - Untrusted Pointer Dereference
CVE-2026-91795
CWE-822 High
No
No
13.2.7.24160, 14.0.8.33807, 2026.2.1.39815 23.09.2026 SB2026092343
#VU151829 - Protection Mechanism Failure
CVE-2026-91796
CWE-693 Low
No
No
13.2.7.24160, 14.0.8.33807, 2026.2.1.39815 23.09.2026 SB2026092343
#VU144044 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2026-18622
CWE-451 Medium
No
No
13.2.6.24111, 14.0.6.33584, 2026.1.3.36551 18.08.2026 SB2026081833
SB2026081834
#VU137066 - Uncontrolled Search Path Element
CVE-2026-57239
CWE-427 High
Available
No
13.2.5.24109, 14.0.5.33580, 2026.1.2.36540, 2026.1.2.70304 08.07.2026 SB2026070823
#VU137067 - Out-of-bounds read
CVE-2026-57241
CWE-125 Low
No
No
13.2.5.24109, 14.0.5.33580, 2026.1.2.36540, 2026.1.2.70304 08.07.2026 SB2026070823
#VU137072 - Release of invalid pointer or reference
CVE-2026-57248
CWE-763 High
No
No
13.2.5.24109, 14.0.5.33580, 2026.1.2.36540, 2026.1.2.70304 08.07.2026 SB2026070823
#VU137073 - Improper Validation of Array Index
CVE-2026-57251
CWE-129 High
No
No
13.2.5.24109, 14.0.5.33580, 2026.1.2.36540, 2026.1.2.70304 08.07.2026 SB2026070823
#VU137074 - Type confusion
CVE-2026-57254
CWE-843 High
No
No
13.2.5.24109, 14.0.5.33580, 2026.1.2.36540, 2026.1.2.70304 08.07.2026 SB2026070823
#VU137075 - Out-of-bounds read
CVE-2026-57257
CWE-125 Low
No
No
13.2.5.24109, 14.0.5.33580, 2026.1.2.36540, 2026.1.2.70304 08.07.2026 SB2026070823
#VU137076 - Out-of-bounds read
CVE-2026-57258
CWE-125 Low
No
No
13.2.5.24109, 14.0.5.33580, 2026.1.2.36540, 2026.1.2.70304 08.07.2026 SB2026070823
#VU137077 - Out-of-bounds write
CVE-2026-57260
CWE-787 Medium
No
No
13.2.5.24109, 14.0.5.33580, 2026.1.2.36540, 2026.1.2.70304 08.07.2026 SB2026070823
#VU137078 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2026-57259
CWE-611 Medium
No
No
13.2.5.24109, 14.0.5.33580, 2026.1.2.36540, 2026.1.2.70304 08.07.2026 SB2026070823


Showing elements 21 - 40 out of 679