Vulnerability Spotlight: Use-after-free vulnerabilities in Foxit Reader could lead to arbitrary code execution
Summary: Cisco Talos discovered four use-after-free vulnerabilities in Foxit Reader, a popular PDF reader that supports JavaScript for interactive documents and dynamic forms, which Talos says adds attack surface. A specially crafted PDF can trigger reuse of previously freed memory and lead to arbitrary code execution, and an attacker must trick a user into opening a malicious file; the flaws are tracked as CVE-2022-32774, CVE-2022-38097, CVE-2022-37332 and CVE-2022-40129, with Foxit Reader 12.0.1.12430 confirmed exploitable and an update available.
What's compelling: Arbitrary code execution in a document reader is reached by a user simply opening a file, and Talos confirmed version 12.0.1.12430 could be exploited, so every unpatched seat running that build is a live entry point.
Read the original at Cisco Talos ↗
- Topics
- Vulnerabilities & Patching
- Mentions
- CVE-2022-32774CVE-2022-37332CVE-2022-38097CVE-2022-40129
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026