Exploit for #VU63150 Use-after-free in Foxit PDF Reader for Windows and Foxit PDF Editor (formerly Foxit PhantomPDF)

Vulnerability identifier: #VU63150

Vulnerability risk: High

CVSSv4.0: 7 [CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/U:Amber]

CVE-ID: CVE-2022-28672

CWE-ID: CWE-416

Exploitation vector: Network

Exploits in database: 1

• December 18, 2022
  • CVE-2022-28672 (Foxit PDF Reader Remote Code Execution Exploit) [Github]

Vulnerable software:
Foxit PDF Reader for Windows
Client/Desktop applications / Office applications
Foxit PDF Editor (formerly Foxit PhantomPDF)
Client/Desktop applications / Office applications

Vendor: Foxit Software Inc.