SEC.co
Emergency

By vendor

Foxit vulnerabilities

Known CVEs affecting Foxit products, prioritized by severity, with SEC.co remediation and detection guidance.

1 published vulnerability

Known exploited (KEV)CriticalHighMediumAll recent
  • CVE-2026-12057HIGH 8.6

    A vulnerability in Foxit AI allows malicious PDF files to execute arbitrary code on a user's computer. When a PDF contains embedded JavaScript, the application's sandbox—designed to isolate and restrict dangerous operations—fails to block certain risky interfaces. This oversight allows remote code to be loaded and executed with the privileges of the logged-in user, potentially giving an attacker full control of the system.