vciy

Foxit Reader: 286 records in one advisory

286 records announced together, published between 2017-10-31 and 2019-06-03, every one of them citing the same advisory.

The advisory

Every record in this batch cites https://www.foxitsoftware.com/support/security-bulletins.php. That is the CNA's own reference, held in the index, and it is why these records are on one page.

What the records offer

No record in this batch publishes a fixed version in held sources.

No record in this batch is listed by CISA in held sources.

132 of 286 records name something of its own. For the other 154, held sources say the same thing about each.

Most commonly mapped weakness across the batch: CWE-416-Use After Free.

What this page does not cover

This batch is 286 of the 636 records that cite the same advisory. The other 350 are different findings announced alongside it.

182 of them are on the sibling batches linked below. The remaining 168 are grouped with nothing and have only their own record pages.

Other batches under the same advisory: foxitsoftware-security-bulletins-0463ca62e1, foxitsoftware-security-bulletins-52bff22065, foxitsoftware-security-bulletins-828fde758e

The batch is what one advisory announced. It is not every record sharing this weakness, this product or this mechanism, and nothing here is scoped to any estate.

Listed for shared announcement, not shared vulnerability. Each record here is its own finding with its own page, and fixing one does not address another.

CVE-2017-10941no title heldCWE-416-Use After Free
CVE-2017-10945app.alertCWE-416-Use After Free
CVE-2017-10946setitemCWE-416-Use After Free
CVE-2017-10947no title heldCWE-416-Use After Free
CVE-2017-10948app.execmenuitemCWE-416-Use After Free
CVE-2017-10953no title heldCWE-78-Improper Neutralization of Special…
CVE-2017-10957arrowendCWE-416-Use After Free
CVE-2017-10958no title heldCWE-416-Use After Free
CVE-2017-10959no title heldCWE-416-Use After Free
CVE-2017-14823signerCWE-843-Access of Resource Using Incompatible…
CVE-2017-14824insertCWE-843-Access of Resource Using Incompatible…
CVE-2017-14825no title heldCWE-843-Access of Resource Using Incompatible…
CVE-2017-14826formnodesCWE-843-Access of Resource Using Incompatible…
CVE-2017-14827no title heldCWE-843-Access of Resource Using Incompatible…
CVE-2017-14828no title heldCWE-843-Access of Resource Using Incompatible…
CVE-2017-14829no title heldCWE-843-Access of Resource Using Incompatible…
CVE-2017-14830no title heldCWE-843-Access of Resource Using Incompatible…
CVE-2017-14831no title heldCWE-416-Use After Free
CVE-2017-14832caretCWE-416-Use After Free
CVE-2017-14833no title heldCWE-416-Use After Free
CVE-2017-14834no title heldCWE-416-Use After Free
CVE-2017-14835no title heldCWE-843-Access of Resource Using Incompatible…
CVE-2017-14836moddateCWE-416-Use After Free
CVE-2017-14837pagespanCWE-843-Access of Resource Using Incompatible…
CVE-2017-16571references formcalcCWE-843-Access of Resource Using Incompatible…
CVE-2017-16572formcalc'sCWE-843-Access of Resource Using Incompatible…
CVE-2017-16575bindCWE-416-Use After Free
CVE-2017-16576no title heldCWE-416-Use After Free
CVE-2017-16577alignmentCWE-416-Use After Free
CVE-2017-16578pictureCWE-843-Access of Resource Using Incompatible…
CVE-2017-16581no title heldCWE-416-Use After Free
CVE-2017-16582clearitemsCWE-843-Access of Resource Using Incompatible…
CVE-2017-16583datasetsCWE-416-Use After Free
CVE-2017-16585app.responseCWE-416-Use After Free
CVE-2017-16586no title heldCWE-416-Use After Free
CVE-2017-16587no title heldCWE-416-Use After Free
CVE-2018-10473baseCWE-787-Out-of-bounds Write
CVE-2018-10474no title heldCWE-787-Out-of-bounds Write
CVE-2018-10477no title heldCWE-787-Out-of-bounds Write
CVE-2018-10483no title heldCWE-787-Out-of-bounds Write
CVE-2018-10484no title heldCWE-665-Improper Initialization
CVE-2018-10488no title heldCWE-122-Heap-based Buffer Overflow
CVE-2018-10489declarationCWE-787-Out-of-bounds Write
CVE-2018-10490no title heldCWE-119-Improper Restriction of Operations…
CVE-2018-10491bone weightCWE-787-Out-of-bounds Write
CVE-2018-104943dviewCWE-121-Stack-based Buffer Overflow
CVE-2018-10495no title heldCWE-843-Access of Resource Using Incompatible…
CVE-2018-11617no title heldCWE-416-Use After Free
CVE-2018-11618no title heldCWE-416-Use After Free
CVE-2018-11619no title heldCWE-416-Use After Free
CVE-2018-11622no title heldCWE-787-Out-of-bounds Write
CVE-2018-11623addadlayerCWE-843-Access of Resource Using Incompatible…
CVE-2018-1173bordercolorCWE-416-Use After Free
CVE-2018-1176no title heldCWE-787-Out-of-bounds Write
CVE-2018-1177no title heldCWE-416-Use After Free
CVE-2018-1178no title heldCWE-416-Use After Free
CVE-2018-1180afsimple_calculateCWE-416-Use After Free
CVE-2018-14241no title heldCWE-843-Access of Resource Using Incompatible…
CVE-2018-14242no title heldCWE-843-Access of Resource Using Incompatible…
CVE-2018-14243addpageopenjsmessageCWE-843-Access of Resource Using Incompatible…
CVE-2018-14244calculatenowCWE-843-Access of Resource Using Incompatible…
CVE-2018-14245no title heldCWE-843-Access of Resource Using Incompatible…
CVE-2018-14246converttocpdfCWE-843-Access of Resource Using Incompatible…
CVE-2018-14247no title heldCWE-843-Access of Resource Using Incompatible…
CVE-2018-14248exportasxfdfCWE-843-Access of Resource Using Incompatible…
CVE-2018-14249exportdataobjectCWE-843-Access of Resource Using Incompatible…
CVE-2018-14250getannotCWE-843-Access of Resource Using Incompatible…
CVE-2018-14251getdataobjectCWE-843-Access of Resource Using Incompatible…
CVE-2018-14252no title heldCWE-843-Access of Resource Using Incompatible…
CVE-2018-14253geticonCWE-843-Access of Resource Using Incompatible…
CVE-2018-14254getlinksCWE-843-Access of Resource Using Incompatible…
CVE-2018-14255getnthfieldnameCWE-843-Access of Resource Using Incompatible…
CVE-2018-14256getocgsCWE-843-Access of Resource Using Incompatible…
CVE-2018-14257no title heldCWE-843-Access of Resource Using Incompatible…
CVE-2018-14258getpagenthwordCWE-843-Access of Resource Using Incompatible…
CVE-2018-14259getpagenthwordquadsCWE-843-Access of Resource Using Incompatible…
CVE-2018-14260getpagerotationCWE-843-Access of Resource Using Incompatible…
CVE-2018-14261gettemplateCWE-843-Access of Resource Using Incompatible…
CVE-2018-14262geturlCWE-843-Access of Resource Using Incompatible…
CVE-2018-14263getversionidCWE-843-Access of Resource Using Incompatible…
CVE-2018-14264importanfdfCWE-843-Access of Resource Using Incompatible…
CVE-2018-14265importanxfdxCWE-843-Access of Resource Using Incompatible…
CVE-2018-14266importdataobjectCWE-843-Access of Resource Using Incompatible…
CVE-2018-14267importtextdataCWE-843-Access of Resource Using Incompatible…
CVE-2018-14268mailformCWE-843-Access of Resource Using Incompatible…
CVE-2018-14269no title heldCWE-843-Access of Resource Using Incompatible…
CVE-2018-14270no title heldCWE-843-Access of Resource Using Incompatible…
CVE-2018-14271no title heldCWE-843-Access of Resource Using Incompatible…
CVE-2018-14272removeiconCWE-843-Access of Resource Using Incompatible…
CVE-2018-14273removetemplateCWE-843-Access of Resource Using Incompatible…
CVE-2018-14274scrollCWE-843-Access of Resource Using Incompatible…
CVE-2018-14275spawnpagefromtemplateCWE-843-Access of Resource Using Incompatible…
CVE-2018-14276no title heldCWE-843-Access of Resource Using Incompatible…
CVE-2018-14277no title heldCWE-843-Access of Resource Using Incompatible…
CVE-2018-14278getpagenumwordsCWE-843-Access of Resource Using Incompatible…
CVE-2018-14279no title heldCWE-843-Access of Resource Using Incompatible…
CVE-2018-14280no title heldCWE-693-Protection Mechanism Failure
CVE-2018-14281no title heldCWE-693-Protection Mechanism Failure
CVE-2018-14282streamsCWE-665-Improper Initialization
CVE-2018-14283highlightmodeCWE-416-Use After Free
CVE-2018-14284newdocCWE-416-Use After Free
CVE-2018-14285oneofchildCWE-843-Access of Resource Using Incompatible…
CVE-2018-14286no title heldCWE-843-Access of Resource Using Incompatible…
CVE-2018-14287instancemanager.nodes.appendCWE-843-Access of Resource Using Incompatible…
CVE-2018-14288no title heldCWE-416-Use After Free
CVE-2018-14290no title heldCWE-122-Heap-based Buffer Overflow
CVE-2018-14291no title heldCWE-416-Use After Free
CVE-2018-14292no title heldCWE-416-Use After Free
CVE-2018-14293no title heldCWE-416-Use After Free
CVE-2018-14294no title heldCWE-416-Use After Free
CVE-2018-14295patternsNO_CWE
CVE-2018-14296no title heldCWE-416-Use After Free
CVE-2018-14297freetextCWE-416-Use After Free
CVE-2018-14298inkCWE-416-Use After Free
CVE-2018-14299lineCWE-416-Use After Free
CVE-2018-14301soundCWE-416-Use After Free
CVE-2018-14302squareCWE-416-Use After Free
CVE-2018-14303strikeoutCWE-416-Use After Free
CVE-2018-14304no title heldCWE-416-Use After Free
CVE-2018-14305polylineCWE-416-Use After Free
CVE-2018-14306no title heldCWE-416-Use After Free
CVE-2018-14307no title heldCWE-416-Use After Free
CVE-2018-14308valueasstringCWE-416-Use After Free
CVE-2018-14309seedvalue generic provided signaturesetseedvalueCWE-416-Use After Free
CVE-2018-14310no title heldCWE-416-Use After Free
CVE-2018-14311no title heldCWE-843-Access of Resource Using Incompatible…
CVE-2018-14312no title heldCWE-416-Use After Free
CVE-2018-14313no title heldCWE-843-Access of Resource Using Incompatible…
CVE-2018-14314no title heldCWE-416-Use After Free
CVE-2018-14315no title heldCWE-416-Use After Free
CVE-2018-14317no title heldCWE-843-Access of Resource Using Incompatible…
CVE-2018-17615exitCWE-416-Use After Free
CVE-2018-17616onblurCWE-416-Use After Free
CVE-2018-17617no title heldCWE-416-Use After Free
CVE-2018-17618selection changeCWE-416-Use After Free
CVE-2018-17619no title heldCWE-416-Use After Free
CVE-2018-17620no title heldCWE-416-Use After Free
CVE-2018-17621no title heldCWE-416-Use After Free
CVE-2018-17623no title heldCWE-416-Use After Free
CVE-2018-17624no title heldCWE-416-Use After Free
CVE-2018-17625no title heldCWE-416: Use After Free
CVE-2018-17626no title heldCWE-416: Use After Free
CVE-2018-17627mouseupCWE-416: Use After Free
CVE-2018-17628no title heldCWE-416: Use After Free
CVE-2018-17629no title heldCWE-416: Use After Free
CVE-2018-17630openplayerCWE-416: Use After Free
CVE-2018-17631removeinstanceCWE-416: Use After Free
CVE-2018-17632no title heldCWE-416: Use After Free
CVE-2018-17633subjectCWE-416: Use After Free
CVE-2018-17634attachiconCWE-416: Use After Free
CVE-2018-17635descCWE-416: Use After Free
CVE-2018-17636aliasnodeCWE-416: Use After Free
CVE-2018-17637loadxmlCWE-416: Use After Free
CVE-2018-17638getattributeCWE-416: Use After Free
CVE-2018-17639setelementCWE-416: Use After Free
CVE-2018-17640countCWE-416: Use After Free
CVE-2018-17641deleteitemCWE-416: Use After Free
CVE-2018-17642colspanCWE-416: Use After Free
CVE-2018-17643editvalueCWE-416: Use After Free
CVE-2018-17644additemCWE-416: Use After Free
CVE-2018-17645valignCWE-416: Use After Free
CVE-2018-17646no title heldCWE-416: Use After Free
CVE-2018-17647no title heldCWE-416: Use After Free
CVE-2018-17648rotateCWE-416: Use After Free
CVE-2018-17649setattributeCWE-416: Use After Free
CVE-2018-17650no title heldCWE-416: Use After Free
CVE-2018-17651getitemstateCWE-416: Use After Free
CVE-2018-17652mandatoryCWE-416: Use After Free
CVE-2018-17653no title heldCWE-416: Use After Free
CVE-2018-17654insertinstanceCWE-416: Use After Free
CVE-2018-17655moveinstanceCWE-416: Use After Free
CVE-2018-17656getdisplayitemCWE-416: Use After Free
CVE-2018-17657no title heldCWE-416: Use After Free
CVE-2018-17658resposeCWE-416: Use After Free
CVE-2018-17659no title heldCWE-416: Use After Free
CVE-2018-17660no title heldCWE-416: Use After Free
CVE-2018-17661messageboxCWE-416: Use After Free
CVE-2018-17662beepCWE-416: Use After Free
CVE-2018-17663importdataCWE-416: Use After Free
CVE-2018-17664iscompatiblensCWE-416: Use After Free
CVE-2018-17665currentpageCWE-416: Use After Free
CVE-2018-17666no title heldCWE-416: Use After Free
CVE-2018-17667no title heldCWE-416: Use After Free
CVE-2018-17668removeattributeCWE-416: Use After Free
CVE-2018-17669no title heldCWE-416: Use After Free
CVE-2018-17670no title heldCWE-416: Use After Free
CVE-2018-17672indicesCWE-416: Use After Free
CVE-2018-17673subtypeCWE-416: Use After Free
CVE-2018-17674no title heldCWE-416: Use After Free
CVE-2018-17675no title heldCWE-416: Use After Free
CVE-2018-17676no title heldCWE-416: Use After Free
CVE-2018-17677no title heldCWE-416: Use After Free
CVE-2018-17678gotonameddestCWE-416: Use After Free
CVE-2018-17679no title heldCWE-416: Use After Free
CVE-2018-17680no title heldCWE-416: Use After Free
CVE-2018-17681no title heldCWE-416: Use After Free
CVE-2018-17682delayCWE-416: Use After Free
CVE-2018-17683createiconCWE-416: Use After Free
CVE-2018-17684ispropertyspecifiedCWE-416: Use After Free
CVE-2018-17685no title heldCWE-843: Access of Resource Using Incompatible…
CVE-2018-17687no title heldCWE-416: Use After Free
CVE-2018-17688setitemsCWE-416: Use After Free
CVE-2018-17689no title heldCWE-416: Use After Free
CVE-2018-17690no title heldCWE-416: Use After Free
CVE-2018-17691no title heldCWE-416: Use After Free
CVE-2018-17692no title heldCWE-787: Out-of-bounds Write
CVE-2018-17693no title heldCWE-125: Out-of-bounds Read
CVE-2018-17694no title heldCWE-416: Use After Free
CVE-2018-17695textfieldCWE-416: Use After Free
CVE-2018-17696dataobjectsCWE-416: Use After Free
CVE-2018-17697no title heldCWE-416: Use After Free
CVE-2018-17698no title heldCWE-416: Use After Free
CVE-2018-17700array.prototype.concatCWE-125: Out-of-bounds Read
CVE-2018-17701jsonCWE-125: Out-of-bounds Read
CVE-2018-17702no title heldCWE-416: Use After Free
CVE-2018-17703defaultvalueCWE-416: Use After Free
CVE-2018-17704radiobuttonCWE-416: Use After Free
CVE-2018-17705checkboxCWE-416: Use After Free
CVE-2018-17706fxhtml2pdfCWE-787-Out-of-bounds Write
CVE-2018-5674no title held
CVE-2018-5675no title held
CVE-2018-5676no title held
CVE-2018-5677no title held
CVE-2018-5678no title held
CVE-2018-5679no title held
CVE-2018-5680no title held
CVE-2018-9935no title heldCWE-416-Use After Free
CVE-2018-9936no title heldCWE-704-Incorrect Type Conversion or Cast
CVE-2018-9937subformCWE-704-Incorrect Type Conversion or Cast
CVE-2018-9938abspagespanCWE-704-Incorrect Type Conversion or Cast
CVE-2018-9939no title heldCWE-704-Incorrect Type Conversion or Cast
CVE-2018-9940sheetCWE-704-Incorrect Type Conversion or Cast
CVE-2018-9941no title heldCWE-704-Incorrect Type Conversion or Cast
CVE-2018-9942no title heldCWE-704-Incorrect Type Conversion or Cast
CVE-2018-9943no title heldCWE-704-Incorrect Type Conversion or Cast
CVE-2018-9944addlinkCWE-416-Use After Free
CVE-2018-9945no title heldCWE-416-Use After Free
CVE-2018-9947no title heldCWE-122-Heap-based Buffer Overflow
CVE-2018-9949no title heldCWE-122-Heap-based Buffer Overflow
CVE-2018-9951cpdf_objectCWE-416-Use After Free
CVE-2018-9952formattedvalueCWE-416-Use After Free
CVE-2018-9953no title heldCWE-416-Use After Free
CVE-2018-9954no title heldCWE-416-Use After Free
CVE-2018-9955no title heldCWE-416-Use After Free
CVE-2018-9956no title heldCWE-416-Use After Free
CVE-2018-9957no title heldCWE-416-Use After Free
CVE-2018-9958pointCWE-416-Use After Free
CVE-2018-9959pagenumCWE-416-Use After Free
CVE-2018-9960no title heldCWE-416-Use After Free
CVE-2018-9961no title heldCWE-416-Use After Free
CVE-2018-9962annotation'sCWE-416-Use After Free
CVE-2018-9964no title heldCWE-416-Use After Free
CVE-2018-9965no title heldCWE-416-Use After Free
CVE-2018-9966no title held
CVE-2018-9967no title heldCWE-416-Use After Free
CVE-2018-9968no title heldCWE-416-Use After Free
CVE-2018-9969no title heldCWE-416-Use After Free
CVE-2018-9970execeventCWE-416-Use After Free
CVE-2018-9974no title heldCWE-122-Heap-based Buffer Overflow
CVE-2018-9975shiftCWE-416-Use After Free
CVE-2018-9977no title heldCWE-416-Use After Free
CVE-2018-9981no title heldCWE-824-Access of Uninitialized Pointer
CVE-2018-9982no title heldCWE-787-Out-of-bounds Write
CVE-2019-6727no title heldCWE-416: Use After Free
CVE-2019-6729no title heldCWE-125: Out-of-bounds Read
CVE-2019-6730popupmenuCWE-416: Use After Free
CVE-2019-6731no title heldCWE-125: Out-of-bounds Read
CVE-2019-6747no title heldCWE-787: Out-of-bounds Write
CVE-2019-6748no title heldCWE-787: Out-of-bounds Write
CVE-2019-6749ezixCWE-787: Out-of-bounds Write
CVE-2019-6750no title heldCWE-787: Out-of-bounds Write
CVE-2019-6751no title heldCWE-787: Out-of-bounds Write
CVE-2019-6754localfilestorageCWE-22: Improper Limitation of a Pathname to a…
CVE-2019-6755no title heldCWE-787: Out-of-bounds Write
CVE-2019-6757no title heldCWE-416: Use After Free
CVE-2019-6759no title heldCWE-787: Out-of-bounds Write
CVE-2019-6760no title heldCWE-787: Out-of-bounds Write
CVE-2019-6761cxfa_ffdocviewCWE-416: Use After Free
CVE-2019-6762no title heldCWE-416: Use After Free
CVE-2019-6763toggleformsdesign foxit.foxitreader.ctlCWE-416: Use After Free
CVE-2019-6764no title heldCWE-787: Out-of-bounds Write
CVE-2019-6765no title heldCWE-125: Out-of-bounds Read
CVE-2019-6767no title heldCWE-416: Use After Free
CVE-2019-6768no title heldCWE-416: Use After Free
CVE-2019-6769no title heldCWE-416: Use After Free

286 records, read from the index as it stood on 2026-09-20. Every row opens the record it names, and every value on that record opens its own receipt.

Everything on this page is free. Public data. Withholding it protects nothing.