Known Vulnerabilities for Phantompdf by Foxitsoftware

Listed below are 10 of the newest known vulnerabilities associated with "Phantompdf" by "Foxitsoftware".

These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.

Data on known vulnerable versions is also displayed based on information from known CPEs

Known Vulnerabilities

CVE Shortened Description Severity Publish Date Last Modified
CVE-2021-38574 json An issue was discovered in Foxit Reader and PhantomPDF before 10.1.4. It allows SQL Injection via crafted data at the end of ... 9.8 - CRITICAL 2021-08-11 2021-08-12
CVE-2021-38573 json An issue was discovered in Foxit Reader and PhantomPDF before 10.1.4. It allows writing to arbitrary files because a CombineF... 9.8 - CRITICAL 2021-08-11 2021-08-12
CVE-2021-38572 json An issue was discovered in Foxit Reader and PhantomPDF before 10.1.4. It allows writing to arbitrary files because the extrac... 9.8 - CRITICAL 2021-08-11 2021-08-12
CVE-2021-38571 json An issue was discovered in Foxit Reader and PhantomPDF before 10.1.4. It allows DLL hijacking, aka CNVD-C-2021-68000 and CNVD... 7.8 - HIGH 2021-08-11 2021-08-12
CVE-2021-38570 json An issue was discovered in Foxit Reader and PhantomPDF before 10.1.4. It allows attackers to delete arbitrary files (during u... 9.1 - CRITICAL 2021-08-11 2021-08-12
CVE-2021-38569 json An issue was discovered in Foxit Reader and PhantomPDF before 10.1.4. It allows stack consumption via recursive function call... 7.5 - HIGH 2021-08-11 2021-08-12
CVE-2021-38568 json An issue was discovered in Foxit Reader and PhantomPDF before 10.1.4. It allows memory corruption during conversion of a PDF ... 9.8 - CRITICAL 2021-08-11 2022-05-03
CVE-2021-33795 json Foxit Reader before 10.1.4 and PhantomPDF before 10.1.4 produce incorrect PDF document signatures because the certificate nam... 5.5 - MEDIUM 2021-07-09 2021-07-12
CVE-2021-33794 json Foxit Reader before 10.1.4 and PhantomPDF before 10.1.4 allow information disclosure or an application crash after mishandlin... 9.1 - CRITICAL 2021-08-11 2021-08-12
CVE-2021-33793 json Foxit Reader before 10.1.4 and PhantomPDF before 10.1.4 have an out-of-bounds write because the Cross-Reference table is mish... 9.8 - CRITICAL 2021-08-11 2021-08-12
Results limited to 10 most recent vulnerabilities

Known Affected Configurations (CPE V2.3)

Type Vendor Product Version Update Edition Language
ApplicationFoxitsoftwarePhantompdf9.7.2.29539
ApplicationFoxitsoftwarePhantompdf9.7.2
ApplicationFoxitsoftwarePhantompdf9.7.1.29511
ApplicationFoxitsoftwarePhantompdf9.7.1
ApplicationFoxitsoftwarePhantompdf9.7.0.29478
ApplicationFoxitsoftwarePhantompdf9.7.0.29435
ApplicationFoxitsoftwarePhantompdf9.7
ApplicationFoxitsoftwarePhantompdf9.6.0.25114
ApplicationFoxitsoftwarePhantompdf9.6
ApplicationFoxitsoftwarePhantompdf9.5.0.20723
ApplicationFoxitsoftwarePhantompdf9.5
ApplicationFoxitsoftwarePhantompdf9.4.1.16828
ApplicationFoxitsoftwarePhantompdf9.4.0.16811
ApplicationFoxitsoftwarePhantompdf9.3.0.10826
ApplicationFoxitsoftwarePhantompdf9.3
ApplicationFoxitsoftwarePhantompdf9.2.0.9297
ApplicationFoxitsoftwarePhantompdf9.2
ApplicationFoxitsoftwarePhantompdf9.1.0.5096
ApplicationFoxitsoftwarePhantompdf9.1
ApplicationFoxitsoftwarePhantompdf9.0.1.31049
Results limited to 20 most recent known configurations
© CVE.report 2026 |

Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. It is the responsibility of user to evaluate the accuracy, completeness or usefulness of any information, opinion, advice or other content. EACH USER WILL BE SOLELY RESPONSIBLE FOR ANY consequences of his or her direct or indirect use of this web site. ALL WARRANTIES OF ANY KIND ARE EXPRESSLY DISCLAIMED. This site will NOT BE LIABLE FOR ANY DIRECT, INDIRECT or any other kind of loss.

CVE, CWE, and OVAL are registred trademarks of The MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. This site includes MITRE data granted under the following license.

Free CVE JSON API cve.report/api

CVE.report and Source URL Uptime Status status.cve.report