CVE-2021-45979: Foxit PDF Editor

High severity, CVSS 7.8. EPSS: 1.5% chance of exploitation in the next 30 days.

Foxit PDF Reader and PDF Editor before 11.1 on macOS allow remote attackers to execute arbitrary code via app.launchURL in the JavaScript API.

Affected products

  • Foxit PDF Editor: before 11.1 (fixed in 11.1)
  • Foxit PDF Reader: before 11.1 (fixed in 11.1)

Published 2022-01-04. Last modified 2026-06-17.