CVE-2018-19449

7.8 highEPSS 2.3%

High (7.8) in foxitsoftware foxit pdf sdk activex. EPSS 2.3% chance of exploitation in the next 30 days.

A File Write can occur for specially crafted PDF files in Foxit Reader SDK (ActiveX) Professional 5.4.0.1031 when the JavaScript API Doc.exportAsFDF is used. An attacker can leverage this to gain remote code execution.

Severity

CVSS 3.0

7.8 high

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS: 2.3% chance of exploitation in the next 30 days; higher than 83% of CVEs (scores of 2026-10-31)
CWE: CWE-787
Published: 2019-06-17
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

foxitsoftware:foxit_pdf_sdk_activex

References

https://www.foxitsoftware.com/support/security-bulletins.php
https://www.foxitsoftware.com/support/security-bulletins.php

Check your stack JSON