CVE-2025-66495 - Foxit PDF Reader Annotation Use-After-Free Remote Code Execution Vulnerability

CVE ID : CVE-2025-66495 Published : Dec. 19, 2025, 7:16 a.m. | 54 minutes ago Description : A use-after-free vulnerability exists in the annotation handling of Foxit PDF Reader before 2025.2.1, 14.0.1, and 13.2.1 on Windows and MacOS. When opening a PDF containing specially crafted JavaScript, a pointer to memory that has already been freed may be accessed or dereferenced, potentially allowing a remote attacker to execute arbitrary code. Severity: 7.8 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Source: Telegram CVE Monitor