CVE-2024-25858

—

CVSS 3.1

8.4 high

EPSS

<1%p11

Published

Mar 5, 2024 (Mar 5, 2024)

Modified

Jun 17, 2026

Description

In Foxit PDF Reader before 2024.1 and PDF Editor before 2024.1, code execution via JavaScript could occur because of an unoptimized prompt message for users to review parameters of commands.

Vendors: foxit
Products: pdf editor, pdf reader
Weakness: CWE-450
Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.2%)

In the news0 stories

No ingested article mentions this CVE yet.