High severity7.8NVD Advisory· Published Nov 2, 2020· Updated Jun 17, 2026
CVE-2020-14425
CVE-2020-14425
Description
Foxit Reader before 10.0 allows Remote Command Execution via the app.opencPDFWebPage JavsScript API. An attacker can execute local files and bypass the security dialog.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3cpe:2.3:a:foxitsoftware:foxit_reader:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:foxitsoftware:foxit_reader:*:*:*:*:*:*:*:*range: >=9.7.1,<10.0.0
- (no CPE)range: <10.0
- Foxit/Readerdescription
Patches
Vulnerability mechanics
References
3- packetstormsecurity.com/files/159784/Foxit-Reader-9.7.1-Remote-Command-Execution.htmlnvdExploitThird Party AdvisoryVDB Entry
- www.exploit-db.com/exploits/48982nvdExploitThird Party AdvisoryVDB Entry
- www.foxitsoftware.com/support/security-bulletins.phpnvdVendor Advisory
News mentions
0No linked articles in our index yet.