CVE-2017-10994

—

CVSS 3.0

7.3 high

EPSS

5%p92

Published

Jul 7, 2017 (Jul 7, 2017)

Modified

Jun 17, 2026

Description

Foxit Reader before 8.3.1 and PhantomPDF before 8.3.1 have an Arbitrary Write vulnerability, which allows remote attackers to execute arbitrary code via a crafted document.

Vendors: foxitsoftware
Products: foxit reader, phantompdf
Weakness: CWE-123
Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (4.9%)

In the news0 stories

No ingested article mentions this CVE yet.