Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2022-28647 State: PUBLISHED Published: 2023-03-29T00:00:00.000Z Last Updated: 2025-02-18T16:33:47.939Z Severity: HIGH (CVSS 7.8 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Bentley Products: MicroStation CONNECT Problem Types: CWE-125 Description: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.2.034. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of IFC files. Crafted data in an IFC file can trigger a read past the end of an allocated buffer. An attacker can
rsing of IFC files. Crafted data in an IFC file can trigger a read past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-16573. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.bentley.com/en/common-vulnerability-exposure/be-2022-0006 - https://www.zerodayinitiative.com/advisories/ZDI-22-617/
CVE ID: CVE-2022-28648 State: PUBLISHED Published: 2022-04-05T17:55:17 Last Updated: 2024-08-03T05:56:16.455Z Severity: MEDIUM (CVSS 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N) Vendors: JetBrains Products: YouTrack Problem Types: CWE-80 Description: In JetBrains YouTrack before 2022.1.43563 HTML code from the issue description was being rendered Additional Analyst Notes: - CVE Program Container: References: - https://www.jetbrains.com/privacy-security/issues-fixed/
CVE ID: CVE-2022-28649 State: PUBLISHED Published: 2022-04-05T17:55:18 Last Updated: 2024-08-03T05:56:16.466Z Severity: MEDIUM (CVSS 4.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N) Vendors: JetBrains Products: YouTrack Problem Types: CWE-1021 Description: In JetBrains YouTrack before 2022.1.43563 it was possible to include an iframe from a third-party domain in the issue description Additional Analyst Notes: - CVE Program Container: References: - https://www.jetbrains.com/privacy-security/issues-fixed/
CVE ID: CVE-2022-28650 State: PUBLISHED Published: 2022-04-05T17:55:20 Last Updated: 2024-08-03T05:56:16.394Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N) Vendors: JetBrains Products: YouTrack Problem Types: CWE-79 Description: In JetBrains YouTrack before 2022.1.43700 it was possible to inject JavaScript into Markdown in the YouTrack Classic UI Additional Analyst Notes: - CVE Program Container: References: - https://www.jetbrains.com/privacy-security/issues-fixed/
CVE ID: CVE-2022-28651 State: PUBLISHED Published: 2022-04-05T17:55:21 Last Updated: 2024-08-03T05:56:16.316Z Severity: HIGH (CVSS 8.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N) Vendors: JetBrains Products: IntelliJ IDEA Problem Types: CWE-497 Description: In JetBrains IntelliJ IDEA before 2021.3.3 it was possible to get passwords from protected fields Additional Analyst Notes: - CVE Program Container: References: - https://www.jetbrains.com/privacy-security/issues-fixed/
CVE ID: CVE-2022-28652 State: PUBLISHED Published: 2024-06-04T21:38:44.324Z Last Updated: 2025-03-13T18:21:18.146Z Vendors: Canonical Ltd. Products: Apport Description: ~/.config/apport/settings parsing is vulnerable to "billion laughs" attack Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://ubuntu.com/security/notices/USN-5427-1 - https://www.cve.org/CVERecord?id=CVE-2022-28652
CVE ID: CVE-2022-28653 State: PUBLISHED Published: 2025-01-31T00:50:49.677Z Last Updated: 2025-02-07T15:56:12.162Z Vendors: Canonical Ltd. Products: Apport Description: Users can consume unlimited disk space in /var/crash Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.cve.org/CVERecord?id=CVE-2022-28653
CVE ID: CVE-2022-28654 State: PUBLISHED Published: 2024-06-04T21:54:37.199Z Last Updated: 2024-10-27T17:48:06.702Z Vendors: Canonical Ltd. Products: Apport Description: is_closing_session() allows users to fill up apport.log Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://ubuntu.com/security/notices/USN-5427-1 - https://www.cve.org/CVERecord?id=CVE-2022-28654
CVE ID: CVE-2022-28655 State: PUBLISHED Published: 2024-06-04T21:56:50.616Z Last Updated: 2024-10-27T17:49:04.264Z Vendors: Canonical Ltd. Products: Apport Description: is_closing_session() allows users to create arbitrary tcp dbus connections Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://ubuntu.com/security/notices/USN-5427-1 - https://www.cve.org/CVERecord?id=CVE-2022-28655
CVE ID: CVE-2022-28656 State: PUBLISHED Published: 2024-06-04T21:58:44.839Z Last Updated: 2025-03-19T17:42:19.680Z Vendors: Canonical Ltd. Products: Apport Description: is_closing_session() allows users to consume RAM in the Apport process Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://ubuntu.com/security/notices/USN-5427-1 - https://www.cve.org/CVERecord?id=CVE-2022-28656
CVE ID: CVE-2022-28657 State: PUBLISHED Published: 2024-06-04T22:02:26.017Z Last Updated: 2024-08-03T05:56:16.428Z Vendors: Canonical Ltd. Products: Apport Description: Apport does not disable python crash handler before entering chroot Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://ubuntu.com/security/notices/USN-5427-1 - https://www.cve.org/CVERecord?id=CVE-2022-28657
CVE ID: CVE-2022-28658 State: PUBLISHED Published: 2024-06-04T22:03:53.633Z Last Updated: 2024-10-27T14:58:19.533Z Vendors: Canonical Ltd. Products: Apport Description: Apport argument parsing mishandles filename splitting on older kernels resulting in argument spoofing Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://ubuntu.com/security/notices/USN-5427-1 - https://www.cve.org/CVERecord?id=CVE-2022-28658
CVE ID: CVE-2022-28660 State: PUBLISHED Published: 2022-05-20T14:32:17 Last Updated: 2024-08-03T05:56:16.454Z Vendors: n/a Products: n/a Problem Types: n/a Description: The querier component in Grafana Enterprise Logs 1.1.x through 1.3.x before 1.4.0 does not require authentication when X-Scope-OrgID is used. Versions 1.2.1, 1.3.1, and 1.4.0 contain the bugfix. This affects -auth.type=enterprise in microservices mode Additional Analyst Notes: - CVE Program Container: References: - https://grafana.com/docs/enterprise-logs/latest/gel-releases/#v121----may-3-2022 - https://security.netapp.com/advisory/ntap-20220707-0004/
CVE ID: CVE-2022-28661 State: PUBLISHED Published: 2022-04-12T09:08:09 Last Updated: 2024-08-03T06:03:52.070Z Vendors: Siemens Products: Simcenter Femap Problem Types: CWE-125 Description: A vulnerability has been identified in Simcenter Femap (All versions < V2022.1.2). The affected application contains an out of bounds read past the end of an allocated buffer while parsing specially crafted .NEU files. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-15114) Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-998762.pdf
CVE ID: CVE-2022-28662 State: PUBLISHED Published: 2022-04-12T09:08:10 Last Updated: 2024-08-03T06:03:52.012Z Vendors: Siemens Products: Simcenter Femap Problem Types: CWE-787 Description: A vulnerability has been identified in Simcenter Femap (All versions < V2022.1.2). The affected application contains an out of bounds write past the end of an allocated buffer while parsing specially crafted .NEU files. This could allow an attacker to leverage this vulnerability to leak information in the context of the current process. (ZDI-CAN-15307) Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-998762.pdf
CVE ID: CVE-2022-28663 State: PUBLISHED Published: 2022-04-12T09:08:12 Last Updated: 2024-08-03T06:03:51.957Z Vendors: Siemens Products: Simcenter Femap Problem Types: CWE-787 Description: A vulnerability has been identified in Simcenter Femap (All versions < V2022.1.2). The affected application contains an out of bounds write past the end of an allocated structure while parsing specially crafted .NEU files. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-15592) Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-998762.pdf
CVE ID: CVE-2022-28664 State: PUBLISHED Published: 2022-08-05T21:20:13.537Z Last Updated: 2025-04-15T18:53:01.397Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N) Vendors: FreshTomato Products: FreshTomato Problem Types: CWE-787 Description: A memory corruption vulnerability exists in the httpd unescape functionality of FreshTomato 2022.1. A specially-crafted HTTP request can lead to memory corruption. An attacker can send a network request to trigger this vulnerability.The `freshtomato-mips` has a vulnerable URL-decoding feature that can lead to memory corruption. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talos
mory corruption. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2022-1509
CVE ID: CVE-2022-28665 State: PUBLISHED Published: 2022-08-05T21:20:22.121Z Last Updated: 2025-04-15T18:52:54.323Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N) Vendors: FreshTomato Products: FreshTomato Problem Types: CWE-787 Description: A memory corruption vulnerability exists in the httpd unescape functionality of FreshTomato 2022.1. A specially-crafted HTTP request can lead to memory corruption. An attacker can send a network request to trigger this vulnerability.The `freshtomato-arm` has a vulnerable URL-decoding feature that can lead to memory corruption. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosi
ory corruption. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2022-1509
CVE ID: CVE-2022-28666 State: PUBLISHED Published: 2022-07-21T16:59:23.260Z Last Updated: 2025-02-20T20:17:21.232Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N) Vendors: YIKES Inc. Products: Custom Product Tabs for WooCommerce (WordPress plugin) Problem Types: CWE-287 Description: Broken Access Control vulnerability in YIKES Inc. Custom Product Tabs for WooCommerce plugin <= 1.7.7 at WordPress leading to &yikes-the-content-toggle option update. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/yikes-inc-easy-custom-woocommerce-product-tabs/wordpress-custom-product-tabs-for-woocomm
tack.com/database/vulnerability/yikes-inc-easy-custom-woocommerce-product-tabs/wordpress-custom-product-tabs-for-woocommerce-plugin-1-7-7-broken-access-control-vulnerability-leading-to-yikes-the-content-toggle-option-update?_s_id=cve
CVE ID: CVE-2022-28667 State: PUBLISHED Published: 2022-11-11T15:49:14.818Z Last Updated: 2025-01-29T20:44:31.734Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: n/a Products: Intel(R) PROSet/Wireless WiFi software Problem Types: denial of service Description: Out-of-bounds write for some Intel(R) PROSet/Wireless WiFi software before version 22.140 may allow an unauthenticated user to potentially enable denial of service via adjacent access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00687.html
CVE ID: CVE-2022-28668 State: PUBLISHED Published: 2022-08-03T15:20:32 Last Updated: 2024-08-03T06:03:52.656Z Severity: HIGH (CVSS 7.8 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Sante Products: DICOM Viewer Pro Problem Types: CWE-787 Description: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Sante DICOM Viewer Pro 11.9.2. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of J2K files. The issue results from the lack of proper validation of user-supplied data, which can result in a write past the end of an
e issue results from the lack of proper validation of user-supplied data, which can result in a write past the end of an allocated data structure. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-16679. Additional Analyst Notes: - CVE Program Container: References: - https://www.zerodayinitiative.com/advisories/ZDI-22-622/
CVE ID: CVE-2022-28669 State: PUBLISHED Published: 2022-07-18T18:40:55 Last Updated: 2024-08-03T06:03:51.931Z Severity: HIGH (CVSS 7.8 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Foxit Products: PDF Reader Problem Types: CWE-416 Description: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.2.1.53537. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of Doc objects. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An att
ssue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-16420. Additional Analyst Notes: - CVE Program Container: References: - https://www.foxit.com/support/security-bulletins.html - https://www.zerodayinitiative.com/advisories/ZDI-22-760/
CVE ID: CVE-2022-28670 State: PUBLISHED Published: 2022-07-18T18:41:01 Last Updated: 2024-08-03T06:03:52.069Z Severity: LOW (CVSS 3.3 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N) Vendors: Foxit Products: PDF Reader Problem Types: CWE-125 Description: This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader 11.2.1.53537. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the processing of AcroForms. Crafted data in an AcroForm can trigger a read past the end of an allocated buffer. An attacker can leverage this in c
. Crafted data in an AcroForm can trigger a read past the end of an allocated buffer. An attacker can leverage this in conjunction with other vulnerabilities to execute arbitrary code in the context of the current process. Was ZDI-CAN-16523. Additional Analyst Notes: - CVE Program Container: References: - https://www.foxit.com/support/security-bulletins.html - https://www.zerodayinitiative.com/advisories/ZDI-22-761/
CVE ID: CVE-2022-28671 State: PUBLISHED Published: 2022-07-18T18:41:10 Last Updated: 2024-08-03T06:03:52.543Z Severity: HIGH (CVSS 7.8 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Foxit Products: PDF Reader Problem Types: CWE-416 Description: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.2.1.53537. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of Doc objects. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An att
ssue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-16639. Additional Analyst Notes: - CVE Program Container: References: - https://www.foxit.com/support/security-bulletins.html - https://www.zerodayinitiative.com/advisories/ZDI-22-762/
CVE ID: CVE-2022-28672 State: PUBLISHED Published: 2022-07-18T18:41:16 Last Updated: 2024-08-03T06:03:51.980Z Severity: HIGH (CVSS 7.8 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Foxit Products: PDF Reader Problem Types: CWE-416 Description: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.2.1.53537. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of Doc objects. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An att
ssue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-16640. Additional Analyst Notes: - CVE Program Container: References: - https://www.foxit.com/support/security-bulletins.html - https://www.zerodayinitiative.com/advisories/ZDI-22-763/
CVE ID: CVE-2022-28673 State: PUBLISHED Published: 2022-07-18T18:41:21 Last Updated: 2024-08-03T06:03:52.380Z Severity: HIGH (CVSS 7.8 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Foxit Products: PDF Reader Problem Types: CWE-416 Description: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.2.1.53537. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of Doc objects. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An att
ssue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-16641. Additional Analyst Notes: - CVE Program Container: References: - https://www.foxit.com/support/security-bulletins.html - https://www.zerodayinitiative.com/advisories/ZDI-22-764/
CVE ID: CVE-2022-28674 State: PUBLISHED Published: 2022-07-18T18:41:28 Last Updated: 2024-08-03T06:03:51.980Z Severity: HIGH (CVSS 7.8 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Foxit Products: PDF Reader Problem Types: CWE-416 Description: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.2.1.53537. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of Annotation objects. The issue results from the lack of validating the existence of an object prior to performing operations on the object.
. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-16644. Additional Analyst Notes: - CVE Program Container: References: - https://www.foxit.com/support/security-bulletins.html - https://www.zerodayinitiative.com/advisories/ZDI-22-765/
CVE ID: CVE-2022-28675 State: PUBLISHED Published: 2022-07-18T18:41:32 Last Updated: 2024-08-03T06:03:52.138Z Severity: HIGH (CVSS 7.8 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Foxit Products: PDF Reader Problem Types: CWE-416 Description: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.2.1.53537. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of Annotation objects. The issue results from the lack of validating the existence of an object prior to performing operations on the object.
. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-16642. Additional Analyst Notes: - CVE Program Container: References: - https://www.foxit.com/support/security-bulletins.html - https://www.zerodayinitiative.com/advisories/ZDI-22-766/
CVE ID: CVE-2022-28676 State: PUBLISHED Published: 2022-07-18T18:41:38 Last Updated: 2024-08-03T06:03:52.035Z Severity: HIGH (CVSS 7.8 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Foxit Products: PDF Reader Problem Types: CWE-416 Description: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.2.1.53537. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of Doc objects. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An att
ssue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-16643. Additional Analyst Notes: - CVE Program Container: References: - https://www.foxit.com/support/security-bulletins.html - https://www.zerodayinitiative.com/advisories/ZDI-22-767/
CVE ID: CVE-2022-28677 State: PUBLISHED Published: 2022-07-18T18:41:43 Last Updated: 2024-08-03T06:03:52.088Z Severity: HIGH (CVSS 7.8 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Foxit Products: PDF Reader Problem Types: CWE-416 Description: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.2.1.53537. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of Annotation objects. The issue results from the lack of validating the existence of an object prior to performing operations on the object.
. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-16663. Additional Analyst Notes: - CVE Program Container: References: - https://www.foxit.com/support/security-bulletins.html - https://www.zerodayinitiative.com/advisories/ZDI-22-768/
CVE ID: CVE-2022-28678 State: PUBLISHED Published: 2022-07-18T18:41:50 Last Updated: 2024-08-03T06:03:52.006Z Severity: HIGH (CVSS 7.8 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Foxit Products: PDF Reader Problem Types: CWE-416 Description: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.2.1.53537. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of Doc objects. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An att
ssue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-16805. Additional Analyst Notes: - CVE Program Container: References: - https://www.foxit.com/support/security-bulletins.html - https://www.zerodayinitiative.com/advisories/ZDI-22-769/