CVE-2021-41784

Foxit PDF Reader before 11.1 and PDF Editor before 11.1, and PhantomPDF before 10.1.6, allow attackers to trigger a use-after-free and execute arbitrary code because JavaScript is mishandled.

CVSS v3.1

7.8 HIGHCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS

1.07% chance of exploitation in the next 30 days, 63th percentile

Published

2022-08-29

Updated

2024-08-04

Proof-of-concept exploits (1)

• Jeromeyoung/CVE-2021-417840★ · 2021-10-20

References

• CVE Record
• NVD entry

Related

• CVE-2021-22205
• CVE-2021-22210
• CVE-2021-24084
• CVE-2021-26084
• CVE-2021-26086
• CVE-2021-27965