CVE-2017-14694: Foxitsoftware Foxit Reader

High severity, CVSS 7.8. EPSS: 7.1% chance of exploitation in the next 30 days.

Foxit Reader 8.3.2.25013 and earlier and Foxit PhantomPDF 8.3.2.25013 and earlier, when running in single instance mode, allows attackers to execute arbitrary code or cause a denial of service via a crafted .pdf file, related to "Data from Faulting Address controls Code Flow starting at tiptsf!CPenInputPanel::FinalRelease+0x000000000000002f.".

Affected products

• Foxitsoftware Foxit Reader: version 8.3.2.25013 only

Published 2017-09-22. Last modified 2026-06-17.