| CVE-2019-20830 | CRÍTICO9.8 | An issue was discovered in Foxit Reader and PhantomPDF before 9.6. It has an out-of-bounds write when Internet Explorer is used. | 04/06/2020 |
| CVE-2019-20829 | ALTO7.5 | An issue was discovered in Foxit Reader and PhantomPDF before 9.6. It has a NULL pointer dereference via FXSYS_wcslen in an Epub file. | 04/06/2020 |
| CVE-2019-20828 | ALTO7.5 | An issue was discovered in Foxit Reader and PhantomPDF before 9.6. It has a buffer overflow because a looping correction does not occur after JavaScript updates Field APs. | 04/06/2020 |
| CVE-2019-20827 | CRÍTICO9.8 | An issue was discovered in Foxit PhantomPDF Mac 3.3 and Foxit Reader for Mac before 3.3. It allows stack consumption because of interaction between ICC-Based color space and Alternate color space. | 04/06/2020 |
| CVE-2019-20826 | ALTO7.5 | An issue was discovered in Foxit PhantomPDF Mac 3.3 and Foxit Reader for Mac before 3.3. It has a NULL pointer dereference. | 04/06/2020 |
| CVE-2019-20825 | CRÍTICO9.8 | An issue was discovered in Foxit PhantomPDF before 8.3.11. It has an out-of-bounds write when Internet Explorer is used. | 04/06/2020 |
| CVE-2019-20824 | ALTO7.5 | An issue was discovered in Foxit PhantomPDF before 8.3.11. It has a NULL pointer dereference via FXSYS_wcslen in an Epub file. | 04/06/2020 |
| CVE-2019-20823 | ALTO7.5 | An issue was discovered in Foxit PhantomPDF before 8.3.11. It has a buffer overflow because a looping correction does not occur after JavaScript updates Field APs. | 04/06/2020 |
| CVE-2018-21244 | CRÍTICO9.8 | An issue was discovered in Foxit PhantomPDF before 8.3.6. It allows arbitrary application execution via an embedded executable file in a PDF portfolio, aka FG-VD-18-029. | 04/06/2020 |
| CVE-2018-21243 | MEDIO6.5 | An issue was discovered in Foxit PhantomPDF before 8.3.6. It has COM object mishandling when Microsoft Word is used. | 04/06/2020 |
| CVE-2018-21242 | CRÍTICO9.8 | An issue was discovered in Foxit PhantomPDF before 8.3.6. It allows Remote Code Execution via a GoToE or GoToR action. | 04/06/2020 |
| CVE-2018-21241 | ALTO7.8 | An issue was discovered in Foxit PhantomPDF before 8.3.6. It has an untrusted search path that allows a DLL to execute remote code. | 04/06/2020 |
| CVE-2018-21240 | ALTO7.5 | An issue was discovered in Foxit Reader and PhantomPDF before 9.2. It allows memory consumption via an ArrayBuffer(0xfffffffe) call. | 04/06/2020 |
| CVE-2018-21239 | MEDIO5.3 | An issue was discovered in Foxit Reader and PhantomPDF before 9.2. It allows NTLM credential theft via a GoToE or GoToR action. | 04/06/2020 |
| CVE-2018-21238 | ALTO7.5 | An issue was discovered in Foxit PhantomPDF before 8.3.7. It allows memory consumption via an ArrayBuffer(0xfffffffe) call. | 04/06/2020 |
| CVE-2018-21237 | MEDIO5.3 | An issue was discovered in Foxit PhantomPDF before 8.3.7. It allows NTLM credential theft via a GoToE or GoToR action. | 04/06/2020 |
| CVE-2020-13815 | ALTO7.5 | An issue was discovered in Foxit Reader and PhantomPDF before 9.7.1. It allows stack consumption via a loop of an indirect object reference. | 04/06/2020 |
| CVE-2020-13814 | CRÍTICO9.8 | An issue was discovered in Foxit Reader and PhantomPDF before 9.7.1. It has a use-after-free via a document that lacks a dictionary. | 04/06/2020 |
| CVE-2019-20821 | ALTO7.5 | An issue was discovered in Foxit PhantomPDF Mac before 3.4. It has a NULL pointer dereference. | 04/06/2020 |
| CVE-2019-20820 | ALTO7.5 | An issue was discovered in Foxit Reader and PhantomPDF before 9.7. It has a NULL pointer dereference during the parsing of file data. | 04/06/2020 |