CVE-2025-66493
Published: Dec 19, 2025
Modified: Dec 19, 2025
CVSS v3.1
7.8
Description
A use-after-free vulnerability exists in the AcroForm handling of Foxit PDF Reader and Foxit PDF Editor before 2025.2.1,14.0.1 and 13.2.1 on Windows . When opening a PDF containing specially crafted JavaScript, a pointer to memory that has already been freed may be accessed or dereferenced, potentially allowing a remote attacker to execute arbitrary code.
| Vendor | Product | Versions |
|---|---|---|
Foxit Software Inc. | Foxit PDF Editor | affected Versions 2025.2.1 and earlieraffected Versions 14.0.1 and earlieraffected Versions 13.2.1 and earlier |
Foxit Software Inc. | Foxit PDF Reader | affected Versions 2025.2.1 and earlieraffected Versions 14.0.1 and earlieraffected Versions 13.2.1 and earlier |
Weaknesses (CWE)
CVSS v3.1 Details
CVSS v3.1 Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now