CVE-2015-8843: Foxitsoftware Foxit Reader

High severity, CVSS 7.4. EPSS: 0.7% chance of exploitation in the next 30 days.

The Foxit Cloud Update Service (FoxitCloudUpdateService) in Foxit Reader 6.1 through 6.2.x and 7.x before 7.2.2, when an update to the Cloud plugin is available, allows local users to gain privileges by writing crafted data to a shared memory region, which triggers memory corruption.

Affected products

• Foxitsoftware Foxit Reader: version 6.1 only; version 6.1.2 only; version 6.1.4 only; version 6.2 only; version 6.2.1 only; version 7.0 only; …

Published 2016-04-13. Last modified 2026-06-17.