EDB-52273

PoC

Firefox ESR 115.11 - PDF.js Arbitrary JavaScript execution

view exploit source exploit_dbtype remoteauthor Milad karimipublished 2025-04-22catalog exploit_db

exploited CVEs (1)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2024-4367US	high8.8	70.7% (99th)	Exploit	2024-05-14
A type check was missing when handling fonts in PDF.js, which would allow arbitrary JavaScript execution in the PDF.js context. This vulnerability affects Firefox < 126, Firefox ES…

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.