CVE-2017-10994: Foxitsoftware Foxit Reader

High severity, CVSS 7.3. EPSS: 4.9% chance of exploitation in the next 30 days.

Foxit Reader before 8.3.1 and PhantomPDF before 8.3.1 have an Arbitrary Write vulnerability, which allows remote attackers to execute arbitrary code via a crafted document.

Affected products

• Foxitsoftware Foxit Reader: up to and including 8.3.0.14878
• Foxitsoftware Phantompdf: up to and including 8.3.0.14878

Published 2017-07-07. Last modified 2026-06-17.