| CVE-2019-20823 | ÉLEVÉE7.5 | An issue was discovered in Foxit PhantomPDF before 8.3.11. It has a buffer overflow because a looping correction does not occur after JavaScript updates Field APs. | 04/06/2020 |
| CVE-2018-21244 | CRITIQUE9.8 | An issue was discovered in Foxit PhantomPDF before 8.3.6. It allows arbitrary application execution via an embedded executable file in a PDF portfolio, aka FG-VD-18-029. | 04/06/2020 |
| CVE-2018-21243 | MOYENNE6.5 | An issue was discovered in Foxit PhantomPDF before 8.3.6. It has COM object mishandling when Microsoft Word is used. | 04/06/2020 |
| CVE-2018-21242 | CRITIQUE9.8 | An issue was discovered in Foxit PhantomPDF before 8.3.6. It allows Remote Code Execution via a GoToE or GoToR action. | 04/06/2020 |
| CVE-2018-21241 | ÉLEVÉE7.8 | An issue was discovered in Foxit PhantomPDF before 8.3.6. It has an untrusted search path that allows a DLL to execute remote code. | 04/06/2020 |
| CVE-2018-21240 | ÉLEVÉE7.5 | An issue was discovered in Foxit Reader and PhantomPDF before 9.2. It allows memory consumption via an ArrayBuffer(0xfffffffe) call. | 04/06/2020 |
| CVE-2018-21239 | MOYENNE5.3 | An issue was discovered in Foxit Reader and PhantomPDF before 9.2. It allows NTLM credential theft via a GoToE or GoToR action. | 04/06/2020 |
| CVE-2018-21238 | ÉLEVÉE7.5 | An issue was discovered in Foxit PhantomPDF before 8.3.7. It allows memory consumption via an ArrayBuffer(0xfffffffe) call. | 04/06/2020 |
| CVE-2018-21237 | MOYENNE5.3 | An issue was discovered in Foxit PhantomPDF before 8.3.7. It allows NTLM credential theft via a GoToE or GoToR action. | 04/06/2020 |
| CVE-2018-21236 | ÉLEVÉE7.5 | An issue was discovered in Foxit Reader before 2.4.4. It has a NULL pointer dereference. | 04/06/2020 |
| CVE-2018-21235 | ÉLEVÉE7.5 | An issue was discovered in Foxit E-mail advertising system before September 2018. It allows authentication bypass and information disclosure, related to Interspire Email Marketer. | 04/06/2020 |
| CVE-2020-13815 | ÉLEVÉE7.5 | An issue was discovered in Foxit Reader and PhantomPDF before 9.7.1. It allows stack consumption via a loop of an indirect object reference. | 04/06/2020 |
| CVE-2020-13814 | CRITIQUE9.8 | An issue was discovered in Foxit Reader and PhantomPDF before 9.7.1. It has a use-after-free via a document that lacks a dictionary. | 04/06/2020 |
| CVE-2020-13813 | ÉLEVÉE7.8 | An issue was discovered in Foxit Studio Photo before 3.6.6.922. It allows local users to gain privileges via a crafted DLL in the current working directory when FoxitStudioPhoto366_3.6.6.916.exe is used. | 04/06/2020 |
| CVE-2020-13812 | ÉLEVÉE7.8 | An issue was discovered in Foxit Studio Photo before 3.6.6.922. It allows local users to gain privileges via a crafted DLL in the current working directory. | 04/06/2020 |
| CVE-2020-13811 | ÉLEVÉE7.8 | An issue was discovered in Foxit Studio Photo before 3.6.6.922. It has an out-of-bounds write via a crafted TIFF file. | 04/06/2020 |
| CVE-2019-20822 | CRITIQUE9.8 | An issue was discovered in the 3D Plugin Beta for Foxit Reader and PhantomPDF before 9.7.0.29430. It has an out-of-bounds write via incorrect image data. | 04/06/2020 |
| CVE-2019-20821 | ÉLEVÉE7.5 | An issue was discovered in Foxit PhantomPDF Mac before 3.4. It has a NULL pointer dereference. | 04/06/2020 |
| CVE-2019-20820 | ÉLEVÉE7.5 | An issue was discovered in Foxit Reader and PhantomPDF before 9.7. It has a NULL pointer dereference during the parsing of file data. | 04/06/2020 |
| CVE-2019-20819 | ÉLEVÉE7.5 | An issue was discovered in Foxit Reader and PhantomPDF before 9.7. It allows stack consumption via nested function calls for XML parsing. | 04/06/2020 |