VYPR
← All advisories
Medium severity5.3NVD Advisory· Published Dec 11, 2025· Updated Jun 17, 2026

CVE-2025-59803

CVE-2025-59803

Description

Foxit PDF Editor and Reader before 2025.2.1 allow signature spoofing via triggers. An attacker can embed triggers (e.g., JavaScript) in a PDF document that execute during the signing process. When a signer reviews the document, the content appears normal. However, once the signature is applied, the triggers modify content on other pages or optional content layers without explicit warning. This can cause the signed PDF to differ from what the signer saw, undermining the trustworthiness of the digital signature. The fixed versions are 2025.2.1, 14.0.1, and 13.2.1.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

10
  • Foxitsoftware/PDF Editor7 versions
    cpe:2.3:a:foxit:pdf_editor:*:*:*:*:*:*:*:*+ 6 more
    • cpe:2.3:a:foxit:pdf_editor:*:*:*:*:*:*:*:*range: <=13.2.0.63256
    • cpe:2.3:a:foxit:pdf_editor:14.0.0.68868:*:*:*:*:*:*:*
    • cpe:2.3:a:foxit:pdf_editor:2025.1.0.66692:*:*:*:*:*:*:*
    • cpe:2.3:a:foxit:pdf_editor:2025.2.0.68868:*:*:*:*:*:*:*
    • cpe:2.3:a:foxit:pdf_editor:14.0.0.33046:*:*:*:*:*:*:*
    • cpe:2.3:a:foxit:pdf_editor:2025.1.0.27937:*:*:*:*:*:*:*
    • cpe:2.3:a:foxit:pdf_editor:2025.2.0.33046:*:*:*:*:*:*:*
  • Foxitsoftware/PDF Reader
    cpe:2.3:a:foxit:pdf_reader:*:*:*:*:*:*:*:*
    Range: <=2025.2.0.68868
  • Foxitsoftware/PDF Reader and Editorcpe-rescue
  • Foxitsoftware/PDF Editor and Readerllm-create
    Range: <2025.2.1, 14.0.1, 13.2.1

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.