CVE-2020-26540 - An issue was discovered in Foxit Reader and PhantomPDF before 4.1 on macOS

Back Back to CVE browser

HIGH

An issue was discovered in Foxit Reader and PhantomPDF before 4.1 on macOS

Published Oct 2, 2020

7.5

HIGH

CVSS 3.1

EPSS 0.67%

Description

An issue was discovered in Foxit Reader and PhantomPDF before 4.1 on macOS. Because the Hardened Runtime protection mechanism is not applied to code signing, code injection (or an information leak) can occur.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-347

References (2)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-19085
Advisory
https://www.foxitsoftware.com/support/security-bulletins.html
x_refsource_MISCPatchVendor Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-19085		Advisory
https://www.foxitsoftware.com/support/security-bulletins.html		x_refsource_MISCPatchVendor Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Oct 2, 2020

Updated Aug 4, 2024

Reserved Oct 2, 2020

Link CVE-2020-26540

CISA Vulnrichment

No data

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2020-26540

Red Hat

No data

ENISA EUVD

Assigner mitre

Published Oct 2, 2020

Updated Aug 4, 2024

Link EUVD-2020-19085

GitHub

No data