CVE-2018-3940

An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Software's PDF Reader, version 9.1.0.5096. A specially crafted PDF document can trigger a previously freed object in memory to be reused. An attacker needs to trick the user to open the malicious file to trigger.

• CWE-416

• http://www.securitytracker.com/id/1041769Third Party Advisory, VDB Entry
• https://talosintelligence.com/vulnerability_reports/TALOS-2018-0607Exploit, Third Party Advisory
• https://www.foxitsoftware.com/support/security-bulletins.phpVendor Advisory
• http://www.securitytracker.com/id/1041769Third Party Advisory, VDB Entry
• https://talosintelligence.com/vulnerability_reports/TALOS-2018-0607Exploit, Third Party Advisory

Published

Oct 8, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-3934An exploitable code execution vulnerability exists in the fi…9.8
• CVE-2018-3935An exploitable code execution vulnerability exists in the UD…7.5
• CVE-2018-3936In Antenna House Office Server Document Converter version V6…8.8
• CVE-2018-3937An exploitable command injection vulnerability exists in the…9.1
• CVE-2018-3938An exploitable stack-based buffer overflow vulnerability exi…9.1
• CVE-2018-3939An exploitable use-after-free vulnerability exists in the Ja…8.8
• CVE-2018-3941An exploitable use-after-free vulnerability exists in the Ja…8.8
• CVE-2018-3942An exploitable use-after-free vulnerability exists in the Ja…8.8
• CVE-2018-3943An exploitable use-after-free vulnerability exists in the Ja…8.8
• CVE-2018-3944An exploitable use-after-free vulnerability exists in the Ja…8.8
• CVE-2018-3945An exploitable use-after-free vulnerability exists in the Ja…8.8
• CVE-2018-3946An exploitable use-after-free vulnerability exists in the Ja…8.8