Known vulnerabilities in Foxit PDF Reader for Windows

Software CPE: cpe:2.3:a:foxit_software:foxit_reader_for_windows:*:*:*:*:*:*:*:*
Total vulnerabilities: 569
Public exploits: 5
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Foxit PDF Reader for Windows Foxit PDF Reader for Windows is affected by 569 known vulnerabilities: 427 high, 32 medium, 110 low Critical High Medium Low

Vulnerabilities (569)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU144044 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2026-18622
CWE-451 Medium
No
No
2026.1.3.36551 18.08.2026 SB2026081833
SB2026081834
#VU137051 - Use After Free
CVE-2026-13126
CWE-416 High
No
No
2026.1.2.36540 08.07.2026 SB2026070823
#VU137061 - Use After Free
CVE-2026-57247
CWE-416 High
No
No
2026.1.2.36540 08.07.2026 SB2026070823
#VU137062 - Use After Free
CVE-2026-57249
CWE-416 High
No
No
2026.1.2.36540 08.07.2026 SB2026070823
#VU137063 - Use After Free
CVE-2026-57250
CWE-416 High
No
No
2026.1.2.36540 08.07.2026 SB2026070823
#VU137064 - Use After Free
CVE-2026-57252
CWE-416 High
No
No
2026.1.2.36540 08.07.2026 SB2026070823
#VU137065 - Use After Free
CVE-2026-57256
CWE-416 High
No
No
2026.1.2.36540 08.07.2026 SB2026070823
#VU137066 - Uncontrolled Search Path Element
CVE-2026-57239
CWE-427 High
Available
No
2026.1.2.36540 08.07.2026 SB2026070823
#VU137067 - Out-of-bounds read
CVE-2026-57241
CWE-125 Low
No
No
2026.1.2.36540 08.07.2026 SB2026070823
#VU137068 - Out-of-bounds read
CVE-2026-57243
CWE-125 Low
No
No
2026.1.2.36540 08.07.2026 SB2026070823
#VU137069 - Out-of-bounds read
CVE-2026-57253
CWE-125 Low
No
No
2026.1.2.36540 08.07.2026 SB2026070823
#VU137070 - Out-of-bounds read
CVE-2026-57255
CWE-125 Low
No
No
2026.1.2.36540 08.07.2026 SB2026070823
#VU137071 - Buffer overflow
CVE-2026-57246
CWE-120 High
No
No
2026.1.2.36540 08.07.2026 SB2026070823
#VU137072 - Release of invalid pointer or reference
CVE-2026-57248
CWE-763 High
No
No
2026.1.2.36540 08.07.2026 SB2026070823
#VU137073 - Improper Validation of Array Index
CVE-2026-57251
CWE-129 High
No
No
2026.1.2.36540 08.07.2026 SB2026070823
#VU137074 - Type confusion
CVE-2026-57254
CWE-843 High
No
No
2026.1.2.36540 08.07.2026 SB2026070823
#VU137075 - Out-of-bounds read
CVE-2026-57257
CWE-125 Low
No
No
2026.1.2.36540 08.07.2026 SB2026070823
#VU137076 - Out-of-bounds read
CVE-2026-57258
CWE-125 Low
No
No
2026.1.2.36540 08.07.2026 SB2026070823
#VU137077 - Out-of-bounds write
CVE-2026-57260
CWE-787 Medium
No
No
2026.1.2.36540 08.07.2026 SB2026070823
#VU137078 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2026-57259
CWE-611 Medium
No
No
2026.1.2.36540 08.07.2026 SB2026070823


Showing elements 1 - 20 out of 569