Vulnerabilities in Popular PDF Platforms Allowed Account Takeover, Data Exfiltration

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Foxit and Apryse PDF Platforms Exposed to Account Takeover and Data Theft Vulnerabilities Novee researchers identified 16 vulnerabilities in the widely used PDF platforms Foxit and Apryse. These flaws, including DOM-based cross-site scripting and OS command injection, could be exploited through malicious documents or URLs, leading to potential account hijacking and data exfiltration. 3 sources 53