foxit has 41 CVEs on record between 2025 and 2026. Disclosure cadence is accelerating: 28 in the last 90 days against 0 in the 90 before. The busiest recent month was September 2026 with 27. The median CVSS is 7.8 (high). None have a confirmed exploitation report. The dominant weakness classes are CWE-416 (12) and CWE-125 (5). Most affected products: pdf_editor (38), pdf_editor_cloud (2), pdf_services_api (1).
CVEs per month
Last 12 months, by publish date
- Exploited share
- 0% vs 1% corpus
- Median CVSS
- 7.8
- Publish → KEV
- —
- Last 90 days
- 28 prev 0
Weakness classes
Products
- pdf_editor 38
- pdf_editor_cloud 2
- pdf_services_api 1
Worst active — by depth score
CVE-2026-91813High· 8.8A vulnerability in Foxit PDF Editor/Reader’s update mechanism allows an update package to be replaced between download and high-privilege extraction due to insufficient file locking and integrity validation48CVE-2026-91803High· 8.8A local privilege escalation vulnerability exists in the updater of Foxit PDF Editor/Reader due to unsafe loading of dynamic-link libraries from a user-writable directory during high-privilege operations48CVE-2026-91800High· 8.8A local privilege escalation vulnerability exists in the installer of Foxit PDF Editor for macOS due to insufficient validation of a user-modifiable configuration value during high-privilege upgrades48CVE-2026-5936High· 8.5An attacker can control a server-side HTTP request by supplying a crafted URL, causing the server to initiate requests to arbitrary destinations47CVE-2026-91818High· 7.8A use-after-free vulnerability exists in Foxit PDF Editor/Reader’s JavaScript handling of PDF annotations43
foxit vulnerabilities
CVEs affecting foxit, newest first. Open any entry for full detail, references, and exploit status.
41 CVEsRSS
CVE-2025-66502Medium· 6.3A stored cross-site scripting (XSS) vulnerability exists in pdfonline.foxit.com within the Page Templates feature
A stored cross-site scripting (XSS) vulnerability exists in pdfonline.foxit.com within the Page Templates feature. A crafted payload can be stored as the template name, which is later rendered into the DOM without proper sanitization. As…
CVE-2025-59803Medium· 5.3Foxit PDF Editor and Reader before 2025.2.1 allow signature spoofing via triggers
Foxit PDF Editor and Reader before 2025.2.1 allow signature spoofing via triggers. An attacker can embed triggers (e.g., JavaScript) in a PDF document that execute during the signing process. When a signer reviews the document, the conte…
CVE-2025-59802High· 7.5Foxit PDF Editor and Reader before 2025.2.1 allow signature spoofing via OCG
Foxit PDF Editor and Reader before 2025.2.1 allow signature spoofing via OCG. When Optional Content Groups (OCG) are supported, the state property of an OCG is runtime-only and not included in the digital signature computation buffer. An…
CVE-2025-55314High· 7.8An issue was discovered in Foxit PDF and Editor for Windows and macOS before 13.2 and 2025 before 2025.2
An issue was discovered in Foxit PDF and Editor for Windows and macOS before 13.2 and 2025 before 2025.2. When pages in a PDF are deleted via JavaScript, the application may fail to properly update internal states. Subsequent annotation …
CVE-2025-55313High· 7.8An issue was discovered in Foxit PDF and Editor for Windows and macOS before 13.2 and 2025 before 2025.2
An issue was discovered in Foxit PDF and Editor for Windows and macOS before 13.2 and 2025 before 2025.2. They allow potential arbitrary code execution when processing crafted PDF files. The vulnerability stems from insufficient handling…
CVE-2025-55312High· 7.8An issue was discovered in Foxit PDF and Editor for Windows before 13.2 and 2025 before 2025.2
An issue was discovered in Foxit PDF and Editor for Windows before 13.2 and 2025 before 2025.2. When pages in a PDF are deleted via JavaScript, the application may fail to properly update internal states. Subsequent annotation management…
CVE-2025-55311Medium· 6.5An issue was discovered in Foxit PDF and Editor for Windows and macOS before 13.2 and 2025 before 2025.2
An issue was discovered in Foxit PDF and Editor for Windows and macOS before 13.2 and 2025 before 2025.2. A crafted PDF can use JavaScript to alter annotation content and subsequently clear the file's modification status via JavaScript i…
CVE-2025-55310High· 7.3An issue was discovered in Foxit PDF and Editor for Windows and macOS before 13.2 and 2025 before 2025.2
An issue was discovered in Foxit PDF and Editor for Windows and macOS before 13.2 and 2025 before 2025.2. An attacker able to alter or replace the static HTML files used by the StartPage feature can cause the application to load maliciou…
CVE-2025-55309Medium· 6.7An issue was discovered in Foxit PDF and Editor for Windows and macOS before 13.2 and 2025 before 2025.2
An issue was discovered in Foxit PDF and Editor for Windows and macOS before 13.2 and 2025 before 2025.2. A crafted PDF can contain JavaScript that attaches an OnBlur action on a form field that destroys an annotation. During user right-…
CVE-2025-55308Medium· 6.7An issue was discovered in Foxit PDF and Editor for Windows before 13.2 and 2025 before 2025.2
An issue was discovered in Foxit PDF and Editor for Windows before 13.2 and 2025 before 2025.2. A crafted PDF containing JavaScript that calls closeDoc() while internal objects are still in use can cause premature release of these object…
CVE-2025-55307Low· 3.3An issue was discovered in Foxit PDF and Editor for Windows before 13.2 and 2025 before 2025.2
An issue was discovered in Foxit PDF and Editor for Windows before 13.2 and 2025 before 2025.2. Opening a malicious PDF containing a crafted JavaScript call to search.query() with a crafted cDIPath parameter (e.g., "/") may cause an out-…