CVE-2024-25858

8.4 highEPSS 0.2%

High (8.4) in foxit. EPSS 0.2% chance of exploitation in the next 30 days.

In Foxit PDF Reader before 2024.1 and PDF Editor before 2024.1, code execution via JavaScript could occur because of an unoptimized prompt message for users to review parameters of commands.

Severity

CVSS 3.1

8.4 high

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.2% chance of exploitation in the next 30 days; higher than 10% of CVEs (scores of 2026-10-31)
CWE: CWE-450
Published: 2024-03-05
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

foxit:pdf_editor
foxit:pdf_reader

References

https://www.foxit.com/support/security-bulletins.html
https://www.foxit.com/support/security-bulletins.html

Check your stack JSON