Vulnerability Spotlight: Use-after-free vulnerability in Foxit PDF Reader

Summary: Cisco Talos discovered a use-after-free vulnerability, tracked as TALOS-2021-1287 (CVE-2020-28588), in Foxit PDF Reader that could let an adversary execute arbitrary code on a victim machine. The flaw exists in how the reader handles certain annotation types, and exploitation requires tricking a user into opening a specially crafted malicious PDF.
Bottom line: Foxit PDF Reader is one of the most widely used PDF readers, and Talos confirmed that version 10.1.3.37598 could still be exploited, so anyone running an older build is exposed to code execution through a single opened document.

Read the original at Cisco Talos ↗

Topics: Vulnerabilities & Patching
Mentions: CVE-2020-28588
Related: Vulnerability Spotlight: Information disclosure vulnerability in the Linux Kernel Cyber Risks ·
Threat Source Newsletter (May 6, 2021) Cyber Risks ·
Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026