Multiple vulnerabilities in Foxit Reader

Description

Multiple vulnerabilities were found in Foxit Reader. Malicious users can exploit these vulnerabilities to execute arbitrary code, gain privileges, cause denial of service, obtain sensitive information, bypass security restrictions.

Below is a complete list of vulnerabilities:

1. Use after free vulnerability in media can be exploited to cause denial of service or execute arbitrary code.
2. An elevation of privilege vulnerability in can be exploited remotely to gain privileges.
3. Out of bounds memory read vulnerability can be exploited to cause denial of service.
4. Information disclosure vulnerability can be exploited to obtain sensitive information.
5. Use after free vulnerability can be exploited to cause denial of service or execute arbitrary code.
6. Security vulnerability can be exploited to bypass security restrictions.

Original advisories

• Foxit Security Bulletins

Exploitation

Public exploits exist for this vulnerability.

CVE list

• CVE-2026-57240
  critical
• CVE-2026-57239
  critical
• CVE-2026-57250
  critical
• CVE-2026-57260
  critical
• CVE-2026-57254
  critical
• CVE-2026-13129
  critical
• CVE-2026-57246
  critical
• CVE-2026-57249
  critical
• CVE-2026-13128
  critical
• CVE-2026-13126
  critical
• CVE-2026-57252
  critical
• CVE-2026-57256
  critical
• CVE-2026-57259
  high
• CVE-2026-57241
  high
• CVE-2026-57243
  high
• CVE-2026-57251
  critical
• CVE-2026-57255
  high
• CVE-2026-57237
  critical
• CVE-2026-57244
  critical
• CVE-2026-57238
  critical
• CVE-2026-57258
  high
• CVE-2026-57245
  critical
• CVE-2026-57253
  high
• CVE-2026-57247
  critical
• CVE-2026-57248
  critical
• CVE-2026-13127
  critical
• CVE-2026-57242
  critical
• CVE-2026-57257
  high

Read more

Find out the statistics of the vulnerabilities spreading in your region on statistics.securelist.com