An issue was discovered in Foxit PDF and Editor for Windows and macOS before 13.2 and 2025 before 2025.2. An attacker able to alter or replace the static HTML files used by the StartPage feature can cause the application to load malicious or compromised content upon startup. This may result in information disclosure, unauthorized data access, or other security impacts.
History

Thu, 11 Dec 2025 21:45:00 +0000

Type Values Removed Values Added
First Time appeared Apple
Apple macos
Foxit
Foxit pdf Editor
Microsoft
Microsoft windows
Vendors & Products Apple
Apple macos
Foxit
Foxit pdf Editor
Microsoft
Microsoft windows

Thu, 11 Dec 2025 20:15:00 +0000

Type Values Removed Values Added
Weaknesses CWE-494
Metrics cvssV3_1

{'score': 7.3, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H'}

ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}


Thu, 11 Dec 2025 15:45:00 +0000

Type Values Removed Values Added
Description An issue was discovered in Foxit PDF and Editor for Windows and macOS before 13.2 and 2025 before 2025.2. An attacker able to alter or replace the static HTML files used by the StartPage feature can cause the application to load malicious or compromised content upon startup. This may result in information disclosure, unauthorized data access, or other security impacts.
References

cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2025-12-11T00:00:00.000Z

Updated: 2025-12-11T19:52:59.008Z

Reserved: 2025-08-12T00:00:00.000Z

Link: CVE-2025-55310

cve-icon Vulnrichment

Updated: 2025-12-11T19:52:17.036Z

cve-icon NVD

Status : Received

Published: 2025-12-11T16:16:25.390

Modified: 2025-12-11T20:16:01.743

Link: CVE-2025-55310

cve-icon Redhat

No data.