CVE-2021-41782: Foxit PDF Editor

High severity, CVSS 7.8. EPSS: 2% chance of exploitation in the next 30 days.

Foxit PDF Reader before 11.1 and PDF Editor before 11.1, and PhantomPDF before 10.1.6, allow attackers to trigger a use-after-free and execute arbitrary code because JavaScript is mishandled.

Affected products

• Foxit PDF Editor: from 11.0, before 11.1 (fixed in 11.1)
• Foxit PDF Reader: from 11.0, before 11.1 (fixed in 11.1)
• Foxit Phantompdf: before 10.1.6 (fixed in 10.1.6)

Published 2022-08-29. Last modified 2026-06-17.