CVE-2021-45978

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

Foxit PDF Reader and PDF Editor before 11.1 on macOS allow remote attackers to execute arbitrary code via xfa.host.gotoURL in the XFA API.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-78

Affected software

No affected versions have been published.

Timeline

Published
Jan 4, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2021

CVE-2021-459797.8Foxit PDF Reader and PDF Editor before 11.1 on macOS allow remote attackers to execute arbitrary code via app.launchURL in the JavaScript APCVE-2021-459807.8Foxit PDF Reader and PDF Editor before 11.1 on macOS allow remote attackers to execute arbitrary code via getURL in the JavaScript API.CVE-2021-459819.8NetScout nGeniusONE 6.3.2 allows an XML External Entity (XXE) attack.CVE-2021-459828.8NetScout nGeniusONE 6.3.2 allows Arbitrary File Upload by a privileged user.CVE-2021-459839.8NetScout nGeniusONE 6.3.2 allows Java RMI Code Execution.CVE-2021-459857.5In Lua 5.4.3, an erroneous finalizer called during a tail call leads to a heap-based buffer over-read.CVE-2021-459869.8Tenda routers G1 and G3 v15.11.0.17(9502)_CN were discovered to contain a command injection vulnerability in the function formSetUSBShareInfCVE-2021-459879.8Tenda routers G1 and G3 v15.11.0.17(9502)_CN were discovered to contain a command injection vulnerability in the function formSetNetCheckTooCVE-2021-459887.5Tenda routers G1 and G3 v15.11.0.17(9502)_CN were discovered to contain a stack overflow in the function formAddDnsForward. This vulnerabiliCVE-2021-459897.5Tenda routers G1 and G3 v15.11.0.17(9502)_CN were discovered to contain a stack overflow in the function guestWifiRuleRefresh. This vulnerabCVE-2021-459909.8Tenda routers G1 and G3 v15.11.0.17(9502)_CN were discovered to contain a command injection vulnerability in the function uploadPicture. ThiCVE-2021-459917.5Tenda routers G1 and G3 v15.11.0.17(9502)_CN were discovered to contain a stack overflow in the function formAddVpnUsers. This vulnerability
CVE-2021-45978: High severity, CVSS 7.8 | Vulnix