Scworld

Foxit and Apryse PDF Platforms Exposed to Account Takeover and Data Theft Vulnerabilities

First seen 19 Feb 2026, 19:17 UTC • Feeds.Feedburner

•53.0

Article Content

Include sub-articles 1 / 1

Browse articles

ThreatCluster

Novee researchers identified 16 vulnerabilities in the widely used PDF platforms Foxit and Apryse. These flaws, including DOM-based cross-site scripting and OS command injection, could be exploited through malicious documents or URLs, leading to potential account hijacking and data exfiltration.

How this analysis works

Timeline

2026-02-18

Article published detailing vulnerabilities in PDF platforms

2026-02-19

SecurityWeek reports on the vulnerabilities and their implications

Attack Flow

Continue Reading

China-Nexus APT UAT-7290 Targets South Asia Telecoms in Cyber Espionage Campaign Data Breach at University of Phoenix Due to Oracle EBS Zero-Day Exploit Clop Hackers Exploit Oracle Zero-Day, Breaching Barts Health NHS and Dartmouth Data APT28 Exploits MSHTML Zero-Day Vulnerability in Windows Cisco Secure Email Gateway Targeted by Advanced Persistent Threat Logitech Confirms Data Breach Linked to Clop Extortion Gang

Foxit and Apryse PDF Platforms Exposed to Account Takeover and Data Theft Vulnerabilities

Article Content

Timeline

More articles in this cluster

Attack Flow

Defensive Countermeasures

Extracted Entities

Continue Reading