Information Disclosure Vulnerability in Foxit PDF Editor by Foxit Software

CVE-2022-37376

What is CVE-2022-37376?

This vulnerability enables remote attackers to potentially access sensitive information from installations of Foxit PDF Editor 11.1.1.53537. Exploitation of this flaw requires user interaction, as the victim must visit a malicious webpage or open a compromised document. The issue is located in how arrays are handled, allowing an attacker to read beyond the limits of allocated objects through JavaScript actions. This could be exploited in combination with other vulnerabilities to execute arbitrary code under the privileges of the current process.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References