LIVE · cybersecurity feed
Live wire
ASOS Breach Reveals the Risks in Customer-Facing SaaSUnpatched AhsayCBS flaws exploited to deploy webshells, mine cryptoAI Training Critical as Governance Challenges GrowUS Disrupts Chinese State-Sponsored Hacking ToolsCitrix warns admins to patch new NetScaler RCE flaw immediatelyCisco Patches a Dozen Critical VulnerabilitiesCisco warns of critical flaws allowing Nexus switch takeoverCVE-2026-21589 · Exploitation attempts against critical Atlassian flaw have begun (CVE-2026-21589)Cyber experts call on CISA to create mandatory federal OT rulesGremlin Foresight AI finds system weaknesses and verifies the fixes
vendor

Foxit

22 CVEs published in the last four months and 1 stories. Exploited flaws first.

Critical0
High22
Medium0
Exploited (KEV)0

All recent CVEs

CVECVSSSeverityProductSummaryPublished
CVE-2026-120578.6highaiWhen the application executes the JavaScript script embedded in the PDF within the sandbox, it fails to intercept 118d ago
CVE-2026-572398.2highpdf editorThe user-controllable executable files will be directly executed by high-privilege processes, allowing low-privile95d ago
CVE-2026-572377.8highpdf editorWhen the application opens a PDF and JavaScript modifies the properties of form fields, it causes the state of the95d ago
CVE-2026-572387.8highpdf editorAfter the application opened the PDF, JavaScript deleted the form field object.95d ago
CVE-2026-131267.8highpdf editorThe embedded JavaScript in the PDF deleted the pages, making the object invalid.95d ago
CVE-2026-131277.8highpdf editorThe application opens the PDF file.95d ago
CVE-2026-131287.8highpdf editorEmbedding JavaScript within a PDF file will cause the page to be deleted.95d ago
CVE-2026-131297.8highpdf editorWhen the application opens a PDF file, JavaScript uses the damaged field tree to trigger field traversal, resultin95d ago
CVE-2026-572427.8highpdf editorThe application opens the PDF, and JavaScript modifies the form.95d ago
CVE-2026-572447.8highpdf editorAfter JavaScript resetting the form, the synchronization process lacks re-entry protection and object lifecycle ve95d ago
CVE-2026-572457.8highpdf editorWhen the application opens a PDF, traverses and builds the annotation elements related to hyperlinks, it fails to 95d ago
CVE-2026-572467.8highpdf editorWhen dealing with abnormally constructed objects, there is a lack of argument validation; JavaScript triggers sign95d ago
CVE-2026-572477.8highpdf editorThe application re-enters the document structure via field processing and deletes the current page, and then conti95d ago
CVE-2026-572487.8highpdf editorWhen the application opens a PDF file and JavaScript writes annotation attributes, there is a lack of sufficient o95d ago
CVE-2026-572497.8highpdf editorAfter the application opened the PDF file, the script first reset the annotation status, then triggered the reset 95d ago
CVE-2026-572507.8highpdf editorWhen the application opens a PDF and JavaScript resets the form fields, the script re-enters the interface.95d ago
CVE-2026-572517.8highpdf editorThe application opens a PDF, but the cloud-like appearance of the construction process lacks proper setting of an 95d ago
CVE-2026-572527.8highpdf editorWhen the application opens a PDF file, during the process of JavaScript deleting pages and removing attachment ann95d ago
CVE-2026-572547.8highpdf editorThere is an abnormal annotation within the PDF that is referenced by other objects.95d ago
CVE-2026-572567.8highpdf editorWhen the application opens a PDF and executes JavaScript, it performs abnormal operations on the list box field, a95d ago
CVE-2026-572607.8highpdf editorThe application opened a PDF file containing an abnormal Unity 3D object.95d ago
CVE-2026-572407.8highpdf editorWhen the application opens a PDF file and JavaScript deletes the PDF fields, the subsequent logic still uses the o95d ago

Filter the full tracker by Foxit →

Our coverage of Foxit

vulnerability

Microsoft, Adobe, Apple, and Foxit vulnerabilities

Cisco Talos's Vulnerability Discovery & Research team has recently disclosed a series of vulnerabilities affecting products from Microsoft, Adobe, Apple, and Foxit. All identified vulnerabilities have reportedly been patched by their respective vendors, aligning with Cisco's responsible disclosure policies. The issues range from privilege escalation and information disclosure to remote code…