CVE-2021-45979

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

Foxit PDF Reader and PDF Editor before 11.1 on macOS allow remote attackers to execute arbitrary code via app.launchURL in the JavaScript API.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-78

Affected software

VendorProductVersions
n/an/an/a

References

Timeline

Published
Jan 4, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2021

CVE-2021-459807.8Foxit PDF Reader and PDF Editor before 11.1 on macOS allow remote attackers to execute arbitrary code via getURL in the JavaScript API.CVE-2021-459819.8NetScout nGeniusONE 6.3.2 allows an XML External Entity (XXE) attack.CVE-2021-459828.8NetScout nGeniusONE 6.3.2 allows Arbitrary File Upload by a privileged user.CVE-2021-459839.8NetScout nGeniusONE 6.3.2 allows Java RMI Code Execution.CVE-2021-459857.5In Lua 5.4.3, an erroneous finalizer called during a tail call leads to a heap-based buffer over-read.CVE-2021-459869.8Tenda routers G1 and G3 v15.11.0.17(9502)_CN were discovered to contain a command injection vulnerability in the function formSetUSBShareInfCVE-2021-459879.8Tenda routers G1 and G3 v15.11.0.17(9502)_CN were discovered to contain a command injection vulnerability in the function formSetNetCheckTooCVE-2021-459887.5Tenda routers G1 and G3 v15.11.0.17(9502)_CN were discovered to contain a stack overflow in the function formAddDnsForward. This vulnerabiliCVE-2021-459897.5Tenda routers G1 and G3 v15.11.0.17(9502)_CN were discovered to contain a stack overflow in the function guestWifiRuleRefresh. This vulnerabCVE-2021-459909.8Tenda routers G1 and G3 v15.11.0.17(9502)_CN were discovered to contain a command injection vulnerability in the function uploadPicture. ThiCVE-2021-459917.5Tenda routers G1 and G3 v15.11.0.17(9502)_CN were discovered to contain a stack overflow in the function formAddVpnUsers. This vulnerabilityCVE-2021-459927.5Tenda routers G1 and G3 v15.11.0.17(9502)_CN were discovered to contain a stack overflow in the function formSetQvlanList. This vulnerabilit
CVE-2021-45979: High severity, CVSS 7.8 | Vulnix