CVE-2020-14425

PoC ×2—

CVSS 3.1

7.8 high

EPSS

41%p99

Published

Nov 2, 2020 (Nov 2, 2020)

Modified

Jun 17, 2026

Description

Foxit Reader before 10.0 allows Remote Command Execution via the app.opencPDFWebPage JavsScript API. An attacker can execute local files and bypass the security dialog.

Vendors: foxitsoftware
Products: foxit reader
Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (40.8%)

In the news0 stories

No ingested article mentions this CVE yet.