CVE-2021-33794: Foxitsoftware Foxit Reader

Critical severity, CVSS 9.1. EPSS: 1.1% chance of exploitation in the next 30 days.

Foxit Reader before 10.1.4 and PhantomPDF before 10.1.4 allow information disclosure or an application crash after mishandling the Tab key during XFA form interaction.

Affected products

• Foxitsoftware Foxit Reader: before 10.1.4 (fixed in 10.1.4)
• Foxitsoftware Phantompdf: before 10.1.4 (fixed in 10.1.4)

Published 2021-08-11. Last modified 2026-06-17.