How many Foxit pdf editor CVEs are in CISA KEV?

None of Foxit pdf editor's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Which versions of Foxit pdf editor are affected?

229 distinct Foxit pdf editor versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in Foxit pdf editor CVEs?

Foxit pdf editor's CVEs most often map to these CWE weakness types: CWE-416 (Use After Free), CWE-125 (Out-of-bounds Read), CWE-787 (Out-of-bounds Write), CWE-476 (NULL Pointer Dereference).

How many critical Foxit pdf editor vulnerabilities are there?

Foxit pdf editor has 5 critical and 271 high-severity CVEs.

What is the average severity of Foxit pdf editor CVEs?

The average CVSS base score across Foxit pdf editor's scored CVEs is 7.2.

RadicalNotion.AI

Log in Create an account

Foxit

356 CVEs

Foxit pdf editor Vulnerabilities

Name: Foxit pdf editor vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

CVE security advisories and vulnerability history for pdf editor by Foxit.

356

Total CVEs

Published

0

In CISA KEV

Exploited in the wild

14

Public exploits

PoC or exploit code

7.2

Avg CVSS

2021–2026

Last updated September 23, 2026

Overview

Foxit pdf editor has 356 published CVE records since 2021, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 14 have a known public exploit. The average CVSS base score across scored CVEs is 7.2. Affected platforms include ios, macos, windows.

Severity and exploitation

How the CVSS severity of Foxit pdf editor's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical5

High271

Medium50

Low30

In CISA’s Known Exploited Vulnerabilities catalog

0

None of Foxit pdf editor's CVEs are currently listed in CISA's KEV catalog.

Public exploits

14

14 of Foxit pdf editor's CVEs have a known public exploit available.

Affected versions and CVEs

Browse every Foxit pdf editor version named in a CVE, then pick one to see only the CVEs that affect it.

Specific versions

11.0.0.498936 CVEs
11.0.1.499386 CVEs

Version ranges

2023.1.0.15510 <= v <= 2023.3.0.23028135 CVEs
2024.1.0.23997 <= v <= 2024.4.1.2768788 CVEs
<= 10.1.12.3787270 CVEs
2025.1.0.27937 <= v <= 2025.3.0.3573762 CVEs
11.0.0.49893 <= v <= 11.0.0.4989351 CVEs
2023.1.0.55583 <= v <= 2023.3.0.6308344 CVEs
2023.0 <= v <= 2023.3.0.2302839 CVEs
12.0.0.12394 <= v <= 12.1.4.1540033 CVEs
13.0.0.21632 <= v <= 13.0.1.2169333 CVEs
<= 10.1.5.3767230 CVEs
11.0.0.49893 <= v <= 11.2.8.5384230 CVEs
12.0.0 <= v <= 12.1.4.1540029 CVEs
<= 13.2.4.2404828 CVEs
11.0.1.49938 <= v <= 11.0.1.4993828 CVEs
14.0.0.33046 <= v <= 14.0.4.3350828 CVEs
2026.1.0.36452 <= v <= 2026.1.1.3648528 CVEs
<= 13.2.5.6348227 CVEs
14.0.0.33046 <= v <= 14.0.7.3375126 CVEs
2024.1.0.63682 <= v <= 2024.4.1.6647926 CVEs
2026.1.0.36452 <= v <= 2026.2.0.3974726 CVEs
11.0.0 <= v <= 11.2.8.5384225 CVEs
2023.1.0.15510 <= v <= 2023.1.0.1551024 CVEs
<= 10.1.4.3765123 CVEs
11.0.0 <= v <= 11.2.7.5381223 CVEs
12.0.0 <= v <= 12.1.3.1535623 CVEs
11.0.0 <= v <= 11.2.6.5379021 CVEs
< 10.1.12.3787220 CVEs
<= 11.1.6.010920 CVEs
2025.1.0.27937 <= v <= 2025.1.0.2793718 CVEs
13.0.0.61829 <= v <= 13.0.1.6186617 CVEs
< 10.1.916 CVEs
<= 10.1.6.3774916 CVEs
<= 10.1.7.3777716 CVEs
11.0.0 <= v < 11.2.316 CVEs
12.0.0.0601 <= v <= 12.1.2.5536616 CVEs
12.0.0.12394 <= v <= 12.0.0.1239416 CVEs
>= 11.0.0.4989315 CVEs
12.0.0 <= v <= 12.1.2.1533215 CVEs
<= 11.2.10.5395114 CVEs
<= 13.1.7.2363714 CVEs
11.0 <= v <= 11.2.1.5353714 CVEs
11.0.0.49893 <= v <= 11.2.0.5341514 CVEs
12.0 <= v <= 12.1.7.1552614 CVEs
12.0.0 <= v <= 12.1.2.5536614 CVEs
13.0 <= v <= 13.1.3.2247814 CVEs
13.0.0.21632 <= v <= 13.0.0.2163214 CVEs
2023.0 <= v <= 2023.3.0.6308314 CVEs
2023.2.0.21408 <= v <= 2023.2.0.2140814 CVEs
2024.0 <= v <= 2024.2.3.2518414 CVEs
2025.1.0.66692 <= v <= 2025.3.0.6957014 CVEs
13.0 <= v < 13.0.1.2169313 CVEs
13.0 <= v <= 13.0.1.2169313 CVEs
11.0.0 <= v <= 11.1.6.010912 CVEs
2025.1.0.66692 <= v <= 2025.1.0.6669212 CVEs
<= 11.2.8.5384211 CVEs
<= 13.1.7.6302710 CVEs
2023.1.0.15510 <= v < 2023.3.0.230289 CVEs
<= 11.0.0.499838 CVEs
<= 11.0.1.49388 CVEs
<= 13.2.1.239558 CVEs
14.0.0.33046 <= v <= 14.0.1.331978 CVEs
2025.1.0.27937 <= v <= 2025.2.1.331978 CVEs
< 11.1.4.11217 CVEs
<= 11.1.5.09137 CVEs
<= 13.2.2.240147 CVEs
11.0 <= v < 11.17 CVEs
12.0.0.0601 <= v < 12.1.0.12297 CVEs
13.0.0 <= v <= 13.0.1.216937 CVEs
14.0.0 <= v < 14.0.47 CVEs
14.0.0.33046 <= v <= 14.0.2.334027 CVEs
2023.0.0 <= v < 2026.1.17 CVEs
<= 13.2.2.633496 CVEs
<= 13.2.3.634446 CVEs
11.0.0.49893 <= v < 11.2.8.538426 CVEs
12.0.0.12394 <= v < 12.1.4.154006 CVEs
13.0.0.21632 <= v < 13.0.1.216936 CVEs
2026.1.0.70169 <= v <= 2026.1.1.702766 CVEs
< 10.1.105 CVEs
< 13.2.45 CVEs
11.0.0 <= v < 11.2.45 CVEs
12.0.0 <= v <= 12.1.1.553425 CVEs
12.0.0 <= v <= 12.1.8.157035 CVEs
12.0.0.12394 <= v < 12.0.25 CVEs
13.0.0 <= v <= 13.1.4.231475 CVEs
14.0.0.68868 <= v <= 14.0.3.692955 CVEs
2023.1.0.15510 <= v <= 2023.3.0.630835 CVEs
2024.1.0.23997 <= v <= 2024.3.0.267955 CVEs
< 10.1.11.378664 CVEs
< 11.2.11.541134 CVEs
<= 10.1.8.377954 CVEs
11.0.0.49893 <= v < 11.2.5.537854 CVEs
12.0.0 <= v < 12.1.4.154004 CVEs
12.0.0.12394 <= v < 12.1.1.152894 CVEs
12.0.0.12394 <= v < 12.1.8.157034 CVEs
13.0.0 <= v < 13.0.1.216934 CVEs
13.0.0.21632 <= v < 13.1.3.224784 CVEs
13.0.0.61829 <= v <= 13.0.0.618294 CVEs
14.0.0.68868 <= v <= 14.0.2.691644 CVEs
2023.1.0.15510 <= v < 2024.2.3.251844 CVEs
2023.1.0.55583 <= v <= 2023.1.0.555834 CVEs
2023.2.0.61611 <= v <= 2023.2.0.616114 CVEs
2024.1.0.23997 <= v <= 2024.4.1.664794 CVEs
< 10.1.10.378543 CVEs
< 10.1.73 CVEs
< 11.0.13 CVEs
< 11.13 CVEs
< 12.0.13 CVEs
<= 10.1.11.378663 CVEs
<= 13.2.1.633153 CVEs
11.0 <= v <= 11.2.2.535753 CVEs
11.0.0 <= v < 11.2.8.538423 CVEs
11.0.0 <= v <= 11.2.11.541133 CVEs
11.0.0.49893 <= v < 11.2.4.537743 CVEs
12.0.0.12394 <= v < 12.1.0.152503 CVEs
13.0.0 <= v <= 13.0.1.618663 CVEs
14.0.0.33046 <= v <= 14.0.1.690053 CVEs
14.0.0.68868 <= v <= 14.0.7.694413 CVEs
2024.1.0.23997 <= v <= 2024.1.0.239973 CVEs
2025.1.0.27937 <= v <= 2025.2.1.690053 CVEs
2026.1.0.70169 <= v <= 2026.2.0.720293 CVEs
< 11.1.0.09252 CVEs
< 11.1.6.01092 CVEs
<= 11.0.0.05102 CVEs
<= 11.0.0.498932 CVEs
<= 11.0.1.499382 CVEs
<= 11.1.9.05242 CVEs
<= 11.2.11.541132 CVEs
<= 13.2.0.238742 CVEs
<= 13.2.0.632562 CVEs
>= 11.1.1.535372 CVEs
>= 12.1.0.152502 CVEs
11.0 <= v < 11.2.22 CVEs
11.0.0 <= v < 11.2.12 CVEs
11.0.0 <= v <= 11.2.5.537852 CVEs
11.0.1.0719 <= v <= 11.2.0.534152 CVEs
12.0 <= v <= 12.1.5.554492 CVEs
12.0.0.0601 <= v < 12.1.2.553662 CVEs
12.0.0.0601 <= v <= 12.1.1.553422 CVEs
13.0 <= v <= 13.1.2.622012 CVEs
13.0.0.61829 <= v < 13.0.1.618662 CVEs
14.0.0.33046 <= v <= 14.0.0.330462 CVEs
14.0.0.33046 <= v <= 14.0.3.692952 CVEs
14.0.0.68868 <= v <= 14.0.0.688682 CVEs
2023.1.0.55583 <= v < 2023.3.0.630832 CVEs
2024.0 <= v <= 2024.2.3.644022 CVEs
2025.2.0.33046 <= v <= 2025.2.0.330462 CVEs
2025.2.0.68868 <= v <= 2025.2.0.688682 CVEs
< 10.1.111 CVE
< 11.2.8.538421 CVE
< 2024.41 CVE
< 4.2.0.09281 CVE
< 4.3.1.02181 CVE
<= 11.2.9.539381 CVE
<= 13.2.5.241091 CVE
<= 13.2.6.634841 CVE
>= 11.1.1.53537;1 CVE
>= 2023.2.0.214081 CVE
11.0 <= v < 11.2.11 CVE
11.0 <= v <= 11.2.8.538421 CVE
11.0.0 <= v < 11.2.51 CVE
11.0.0 <= v <= 11.1.4.11211 CVE
11.0.0 <= v <= 11.2.2.535751 CVE
11.0.0.0510 <= v <= 11.0.0.498931 CVE
11.0.0.49893 <= v <= 11.2.7.538121 CVE
11.0.1.0719 <= v <= 11.0.1.499381 CVE
11.3.1 <= v <= 11.3.11 CVE
11.x <= v <= 11.2.6.537901 CVE
12.0 <= v < 12.1.4.154001 CVE
12.0 <= v <= 12.1.4.154001 CVE
12.0.0 <= v < 12.11 CVE
12.0.0 <= v <= 12.1.0.12291 CVE
12.0.0 <= v <= 12.1.1.152891 CVE
12.0.0 <= v <= 12.1.6.155091 CVE
12.0.0.12394 <= v <= 12.1.2.553661 CVE
12.0.0.12394 <= v <= 12.1.3.153561 CVE
12.x <= v <= 12.1.2.153321 CVE
13.0.0 <= v <= 13.1.1.224321 CVE
14.0.0.33046 <= v <= 14.0.5.335801 CVE
14.0.0.68868 <= v <= 14.0.5.693391 CVE
2024.1.0.23997 <= v <= 2024.2.1.251531 CVE
2024.1.0.63682 <= v <= 2024.1.0.636821 CVE
2025.1.0.27937 <= v <= 2025.3.0.695701 CVE
2026.1.0.36452 <= v <= 2026.1.1.702761 CVE
2026.1.0.36452 <= v <= 2026.1.2.365401 CVE
2026.1.0.70169 <= v <= 2026.1.2.703041 CVE

Fixed in

13.0.1.2169322 CVEs
10.1.12.3787220 CVEs
10.1.916 CVEs
11.2.316 CVEs
12.1.4.1540011 CVEs
11.110 CVEs
11.2.8.5384210 CVEs
2023.3.0.230289 CVEs
11.1.4.11217 CVEs
12.1.0.12297 CVEs
14.0.47 CVEs
2026.1.17 CVEs
10.1.105 CVEs
11.2.45 CVEs

Find a version

356 CVEs

Sort

Foxit PDF Editor/Reader Doc Object Use-After-Free Information Disclosure Vulnerability
CVE-2026-91790CWE-416
High · CVSS 7.8
EPSS 0.1% (2th pct)2026-09-23
Foxit PDF Editor/Reader Annotation Use-After-Free Remote Code Execution Vulnerability
CVE-2026-91791CWE-416
High · CVSS 7.8
EPSS 0.1% (3th pct)2026-09-23
Foxit PDF Editor/Reader Annotation Use-After-Free Remote Code Execution Vulnerability
CVE-2026-91792CWE-416
High · CVSS 7.8
EPSS 0.1% (2th pct)2026-09-23
Foxit PDF Editor/Reader Doc Object Use-After-Free Information Disclosure Vulnerability
CVE-2026-91793CWE-416
High · CVSS 7.8
EPSS 0.1% (2th pct)2026-09-23
Foxit PDF Editor/Reader FileOpen Uninitialized Variable Remote Code Execution Vulnerability
CVE-2026-91795CWE-822
High · CVSS 7.8
EPSS 0.1% (0th pct)2026-09-23
Foxit PDF Editor/Reader importIcon NTLM Response Information Disclosure Vulnerability
CVE-2026-91796CWE-693
Medium · CVSS 6.1
EPSS 0.1% (2th pct)2026-09-23
Foxit PDF Editor/Reader Portfolio Directory Traversal Remote Code Execution Vulnerability
CVE-2026-91797CWE-73
High · CVSS 7.8
EPSS 0.2% (11th pct)2026-09-23
Foxit Editor/Reader Array resetForm Use-After-Free Vulnerability
CVE-2026-91799CWE-416
High · CVSS 7.8
EPSS 0.1% (3th pct)2026-09-23
Use-after-free Vulnerability in Foxit PDF Editor/Reader Page-tree Handling
CVE-2026-91805CWE-416
High · CVSS 7.8
EPSS 0.1% (1th pct)2026-09-23
Foxit PDF Editor installer local privilege escalation
CVE-2026-91800CWE-732
High · CVSS 8.8
EPSS 0.1% (1th pct)2026-09-23
Foxit PDF Editor/Reader RichMedia Annotation Directory Traversal Remote Code Execution Vulnerability
CVE-2026-91801CWE-22
High · CVSS 7.8
EPSS 0.2% (4th pct)2026-09-23
Foxit PDF Editor/Reader — Heap Buffer Overflow in WebP Image Decoding via Bitmap Stride Confusion
CVE-2026-91802CWE-787
High · CVSS 7.8
EPSS 0.1% (1th pct)2026-09-23
Foxit PDF Editor/Reader Out-of-bounds Write Vulnerability While Rendering
CVE-2026-91804CWE-787
High · CVSS 7.8
EPSS 0.1% (2th pct)2026-09-23
Foxit PDF Editor/Reader Doc Object Use-After-Free Information Disclosure Vulnerability
CVE-2026-91806CWE-416
High · CVSS 7.8
EPSS 0.1% (1th pct)2026-09-23
Foxit PDF Editor/Reader PDF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
CVE-2026-91807CWE-125
Medium · CVSS 6.1
EPSS 0.1% (1th pct)2026-09-23
Security Vulnerability Report – Foxit PDF Editor/Reader Updater DLL Search Path Hijacking
CVE-2026-91803CWE-427
High · CVSS 8.8
EPSS 0.1% (1th pct)2026-09-23
Foxit PDF Editor/Reader JPEG File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
CVE-2026-91808CWE-125
Medium · CVSS 6.1
EPSS 0.1% (1th pct)2026-09-23
Foxit PDF Editor/Reader Doc Object Out-Of-Bounds Read Information Disclosure Vulnerability
CVE-2026-91810CWE-125
Medium · CVSS 6.1
EPSS 0.1% (1th pct)2026-09-23
Foxit PDF Editor/Reader PRC Stream Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
CVE-2026-91811CWE-787
High · CVSS 7.8
EPSS 0.1% (1th pct)2026-09-23
Foxit PDF Editor/Reader FoxitUpdater Improper Certificate Validation Local Privilege Escalation Vulnerability
CVE-2026-91812CWE-295
High · CVSS 8.1
EPSS 0.1% (3th pct)2026-09-23
Foxit PDF Editor/Reader FoxitUpdater Race Condition Local Privilege Escalation Vulnerability
CVE-2026-91813CWE-367
High · CVSS 8.8
EPSS 0.1% (0th pct)2026-09-23
Foxit PDF Editor/Reader JPEG2000 Parsing Memory Corruption Remote Code Execution Vulnerability
CVE-2026-91815CWE-787
High · CVSS 7.8
EPSS 0.1% (2th pct)2026-09-23
Foxit PDF Editor/Reader AcroForm Use-After-Free Remote Code Execution Vulnerability
CVE-2026-91816CWE-416
High · CVSS 7.8
EPSS 0.1% (1th pct)2026-09-23
Foxit PDF Editor/Reader AcroForm Out-of-Bounds Read Remote Code Execution Vulnerability
CVE-2026-91817CWE-125
Medium · CVSS 6.1
EPSS 0.1% (1th pct)2026-09-23
Foxit PDF Editor/Reader Annotation Use-After-Free Remote Code Execution Vulnerability
CVE-2026-91818CWE-416
High · CVSS 7.8
EPSS 0.1% (1th pct)2026-09-23
Foxit PDF Editor/Reader U3D File Parsing Integer Overflow Remote Code Execution Vulnerability
CVE-2026-91789CWE-787
High · CVSS 7.8
EPSS 0.2% (5th pct)2026-09-23
Foxit PDF Editor/Reader Annotation Use-After-Free Information Disclosure Vulnerability
CVE-2026-91809CWE-416
High · CVSS 7.8
EPSS 0.1% (1th pct)2026-09-23
Foxit PDF Editor/Reader's signature-validation pop-up reports modified certified documents as valid
CVE-2026-18622CWE-451
Medium · CVSS 5.5
EPSS 0.1% (2th pct)2026-08-13
Foxit PDF Editor/Reader Annotation Use-After-Free Remote Code Execution Vulnerability
CVE-2026-13126CWE-416
High · CVSS 7.8
EPSS 0.2% (6th pct)2026-07-08
Foxit PDF Editor/Reader Annotation Use-After-Free Remote Code Execution Vulnerability
CVE-2026-13127CWE-416
High · CVSS 7.8
EPSS 0.2% (6th pct)2026-07-08

Showing 30 of 356

Common weakness types

The CWE weakness categories most often found in Foxit pdf editor CVEs. Follow any weakness for its full explanation.

Disclosure activity by year

How many Foxit pdf editor CVEs were published each year.

2021

28

2022

53

2023

26

2024

151

2025

28

2026

70

Other Foxit products

Browse vulnerabilities for other products by Foxit.

phantompdf573 CVEs foxit reader401 CVEs pdf reader373 CVEs reader312 CVEs Foxit PDF Reader109 CVEs Foxit PDF Editor87 CVEs foxit studio photo54 CVEs Studio Photo51 CVEs

All Foxit vulnerabilities

Frequently asked questions

Common questions about Foxit pdf editor vulnerabilities.

How many CVEs does Foxit pdf editor have?: Foxit pdf editor has 356 published CVE records since 2021.
How many Foxit pdf editor CVEs are in CISA KEV?: None of Foxit pdf editor's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for Foxit pdf editor vulnerabilities?: Yes — 14 of Foxit pdf editor's CVEs have a known public exploit.
Which versions of Foxit pdf editor are affected?: 229 distinct Foxit pdf editor versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in Foxit pdf editor CVEs?: Foxit pdf editor's CVEs most often map to these CWE weakness types: CWE-416 (Use After Free), CWE-125 (Out-of-bounds Read), CWE-787 (Out-of-bounds Write), CWE-476 (NULL Pointer Dereference).
How many critical Foxit pdf editor vulnerabilities are there?: Foxit pdf editor has 5 critical and 271 high-severity CVEs.
What is the average severity of Foxit pdf editor CVEs?: The average CVSS base score across Foxit pdf editor's scored CVEs is 7.2.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track Foxit pdf editor vulnerabilities

Get an alert for each new Foxit pdf editor CVE, with AI-written analysis and remediation steps.

Create an account See pricing

12.0.25 CVEs

13.2.45 CVEs

10.1.11.378664 CVEs

11.2.11.541134 CVEs

11.2.5.537854 CVEs

12.1.1.152894 CVEs

12.1.8.157034 CVEs

13.1.3.224784 CVEs

2024.2.3.251844 CVEs

10.1.10.378543 CVEs

10.1.73 CVEs

11.0.13 CVEs

11.2.13 CVEs

11.2.4.537743 CVEs

12.0.13 CVEs

12.1.0.152503 CVEs

11.1.0.09252 CVEs

11.1.6.01092 CVEs

11.2.22 CVEs

12.1.2.553662 CVEs

13.0.1.618662 CVEs

2023.3.0.630832 CVEs

10.1.111 CVE

11.2.51 CVE

12.11 CVE

2024.41 CVE

4.2.0.09281 CVE

4.3.1.02181 CVE