Vulnetix
Try Vulnetix Request Demo
CVE-2021-40420 PUBLISHED CVSS 8.800000190734863 HIGH

A use-after-free vulnerability exists in the JavaScript engine of Foxit Software’s PDF Reader, version 11.1.0.52543. A specially-crafted PDF document can trigger the reuse of previously freed memory, which can lead to arbitrary code execution. An attacker needs to trick the user to open the malicious file to trigger this vulnerability. Exploitation is also possible if a user visits a specially-crafted, malicious site if the browser plugin extension is enabled.

EPSS 0.60% · 69.4th percentile

Risk Scores

CVSS v3.0
8.800000190734863
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS Score
0.60%
69.4th percentile

Affected Products

VendorProductVersions
n/aFoxitFoxit Reader 11.1.0.52543
foxitpdf_reader11.1.0.52543

Timeline

References

Open in Interactive Console →