foxit phantompdf

Name: foxit phantompdf
Brand: foxit

productUS

cpe:2.3:a:foxit:phantompdf:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

EPSS ≥ 10%

critical

by severity

0critical6high3medium0low

updated 2026-10-26

vulnerabilities (9)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2021-41784US	high7.8	1.08% (65th)	Exploit	10.1.6	2022-08-29	< 10.1.6
CVE-2021-41785US	high7.8	1.96% (80th)	—	10.1.6	2022-08-29	< 10.1.6
CVE-2021-41783US	high7.8	1.96% (80th)	—	10.1.6	2022-08-29	< 10.1.6
CVE-2021-41782US	high7.8	1.96% (80th)	—	10.1.6	2022-08-29	< 10.1.6
CVE-2021-41781US	high7.8	1.96% (80th)	—	10.1.6	2022-08-29	< 10.1.6
CVE-2021-41780US	high7.8	0.79% (56th)	—	10.1.6	2022-08-29	< 10.1.6
CVE-2021-27517US	medium6.1	0.77% (55th)	—	no fix	2021-07-20	2 versions
CVE-2022-25641US	medium5.5	0.29% (21st)	—	10.1.8	2022-08-29	< 10.1.8
CVE-2021-40326US	medium5.5	0.28% (20th)	—	10.1.6	2022-08-29	< 10.1.6

The flaw types (CWEs) most of these CVEs share.

CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer6 CVEs
CWE-416Use After Free6 CVEs
CWE-347Improper Verification of Cryptographic Signature1 CVEs
CWE-362Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')1 CVEs
CWE-363Race Condition Enabling Link Following1 CVEs
CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.