CVE-2019-20836: Foxitsoftware Phantompdf

High severity, CVSS 7.5. EPSS: 1.6% chance of exploitation in the next 30 days.

An issue was discovered in Foxit Reader and PhantomPDF before 9.5. It has mishandling of cloud credentials, as demonstrated by Google Drive.

Affected products

• Foxitsoftware Phantompdf: before 9.5 (fixed in 9.5)
• Foxitsoftware Reader: before 9.5 (fixed in 9.5)

Published 2020-06-04. Last modified 2026-06-17.