CVE-2023-32664

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

A type confusion vulnerability exists in the Javascript checkThisBox method as implemented in Foxit Reader 12.1.2.15332. Specially crafted Javascript code inside a malicious PDF document can cause memory corruption and lead to remote code execution. User would need to open a malicious file to trigger the vulnerability.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-843

Affected software

No affected versions have been published.

Timeline

Published
Jul 19, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-326655.5A flaw was found in GLib. GVariant deserialization is vulnerable to an exponential blowup issue where a crafted GVariant can cause excessiveCVE-2023-326667.2On-chip debug and test interface with improper access control in some 4th Generation Intel(R) Xeon(R) Processors when using Intel(R) SGX or CVE-2023-326685.5LuaTeX before 1.17.0 allows a document (compiled with the default settings) to make arbitrary network requests. This occurs because full accCVE-2023-326695.4Authorization bypass vulnerability in BuddyBoss 2.2.9 version, the exploitation of which could allow an authenticated user to access and renCVE-2023-32678.8When adding a remote backup location, an authenticated user can pass arbitrary OS commands through the username field. The username is passeCVE-2023-326705.4Cross-Site Scripting vulnerability in BuddyBoss 2.2.9 version , which could allow a local attacker with basic privileges to execute a malCVE-2023-326715.4A stored XSS vulnerability has been found on BuddyBoss Platform affecting version 2.2.9. This vulnerability allows an attacker to store a maCVE-2023-326724.3An Incorrect authorisation check in SQLLab in Apache Superset versions up to and including 2.1.0. This vulnerability allows an authenticatedCVE-2023-326739.8Certain versions of HP PC Hardware Diagnostics Windows, HP Image Assistant, and HP Thunderbolt Dock G2 Firmware are potentially vulnerable tCVE-2023-326749.8Certain versions of HP PC Hardware Diagnostics Windows are potentially vulnerable to buffer overflow.CVE-2023-326755.3Vyper is a pythonic Smart Contract Language for the ethereum virtual machine. In contracts with more than one regular nonpayable function, iCVE-2023-326767.2Autolab is a course management service that enables auto-graded programming assignments. A Tar slip vulnerability was found in the Install a
CVE-2023-32664: High severity, CVSS 7.8 | Vulnix