CVE-2021-40326

5.5 mediumEPSS 0.3%

Medium (5.5) in foxit. EPSS 0.3% chance of exploitation in the next 30 days.

Foxit PDF Reader before 11.1 and PDF Editor before 11.1, and PhantomPDF before 10.1.6, mishandle hidden and incremental data in signed documents. An attacker can write to an arbitrary file, and display controlled contents, during signature verification.

Severity

CVSS 3.1

5.5 medium

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

EPSS: 0.3% chance of exploitation in the next 30 days; higher than 20% of CVEs (scores of 2026-10-31)
CWE: CWE-347
Published: 2022-08-29
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

foxit:pdf_editor
foxit:pdf_reader
foxit:phantompdf

References

https://www.foxit.com/support/security-bulletins.html
https://www.foxit.com/support/security-bulletins.html

Check your stack JSON