CVE-2025-55311
MediumCVSS 6.5Exploitation Probability (EPSS)
Low risk10th percentile - higher than 10% of all known CVEs
Summary
In Foxit PDF and Editor for Windows and macOS before 13.2 and 2025 before 2025.2, a crafted PDF can use JavaScript to alter annotation content and then clear the file's modification status. This circumvents digital signature verification by hiding document modifications.
Risk Assessment
An attacker can modify a signed document without invalidating the signature, misleading users about the document's integrity. This undermines trust in digital signatures and may enable fraud.
Recommendation
Update Foxit PDF and Editor to version 13.2 or 2025.2 (or later). Do not trust digital signatures of PDF documents opened in vulnerable versions.
Other vulnerabilities in Foxit PDF Editor
See all- CVE-2026-91800High
A local privilege escalation vulnerability exists in the installer of Foxit PDF Editor for macOS due to insufficient validation of a user-modifiable configuration value during high-privilege upgrades. A local attacker could exploit this issue to execute arbitrary commands with root privileges.
- CVE-2025-55310High
In Foxit PDF and Editor for Windows and macOS before 13.2 and 2025 before 2025.2, an attacker able to alter or replace the static HTML files used by the StartPage feature can cause the application to load malicious or compromised content at startup.
- CVE-2025-55307Low
In Foxit PDF and Editor for Windows before 13.2 and 2025 before 2025.2, opening a malicious PDF containing a crafted JavaScript call to search.query() with a crafted cDIPath parameter (e.g., "/") may cause an out-of-bounds read in internal path-parsing logic, potentially leading to information disclosure or memory corruption.
Original NVD description (English source)
An issue was discovered in Foxit PDF and Editor for Windows and macOS before 13.2 and 2025 before 2025.2. A crafted PDF can use JavaScript to alter annotation content and subsequently clear the file's modification status via JavaScript interfaces. This circumvents digital signature verification by hiding document modifications, allowing an attacker to mislead users about the document's integrity and compromise the trustworthiness of signed PDFs.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS