vulnerability

Foxit Reader: CVE-2023-27365: Exposed Dangerous Method or Function

Try Surface Command

Back to search

Severity

CVSS

(AV:L/AC:M/Au:N/C:C/I:C/A:C)

Published

May 3, 2024

Added

May 3, 2024

Modified

May 4, 2026

Description

Addressed potential issues where the application could be exposed to Remote Code Execution vulnerability and crash when parsing certain XLS or DOC files. This occurs as the application opens the XLS or DOC file with the default permissions and allows for the execution of macros without proper restrictions or consents from users.

Solution

foxit_reader-update-latest

References

CVE-2023-27365
https://attackerkb.com/topics/CVE-2023-27365
https://www.foxit.com/support/security-bulletins.html
https://www.zerodayinitiative.com/advisories/ZDI-23-493/
https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-31141
CWE-749
EUVD-EUVD-2023-31141

Rapid7 Labs

2026 Global Threat Landscape Report

The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.

Get report