CVE-2025-55310: pdf editor 2025.1.0.66692, 2025.1.0.27937; +2 more affected products

Affected technology

pdf editor · through 13.1.7.63027 (inclusive)
foxit

pdf editor · from 2023.1.0.55583 (inclusive), through 2023.3.0.63083 (inclusive)
foxit

pdf editor · from 2024.1.0.63682 (inclusive), through 2024.4.1.66479 (inclusive)
foxit

pdf editor · 2025.1.0.66692
foxit

pdf reader · through 2025.1.0.66692 (inclusive)
foxit

pdf editor · through 13.1.7.23637 (inclusive)
foxit

pdf editor · from 2023.1.0.15510 (inclusive), through 2023.3.0.23028 (inclusive)
foxit

pdf editor · from 2024.1.0.23997 (inclusive), through 2024.4.1.27687 (inclusive)
foxit

pdf editor · 2025.1.0.27937
foxit

pdf reader · through 2025.1.0.27937 (inclusive)
foxit

n/a · n/a
Vendor not specified by the source

Description’s affected range: before 13.2 and 2025 before 2025.2

Component: Not specified by the source

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · User interaction required

What an attacker can do

The source reports that an attacker could access information they should not be able to access. Source advisory’s CVSS 3.1 assessment (base score 7.3/10) rates confidentiality, integrity and availability impact as high.