CVE-2022-32774

A use-after-free vulnerability exists in the JavaScript engine of Foxit Software's PDF Reader, version 12.0.1.12430. By prematurely deleting objects associated with pages, a specially-crafted PDF document can trigger the reuse of previously freed memory, which can lead to arbitrary code execution. An attacker needs to trick the user into opening the malicious file to trigger this vulnerability. Exploitation is also possible if a user visits a specially-crafted, malicious site if the browser plugin extension is enabled.

• CWE-416

• https://talosintelligence.com/vulnerability_reports/TALOS-2022-1600Exploit, Technical Description, Third Party Advisory
• https://talosintelligence.com/vulnerability_reports/TALOS-2022-1600Exploit, Technical Description, Third Party Advisory

Published

Nov 21, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-32769Multiple authentication bypass vulnerabilities exist in the …5
• CVE-2022-3277An uncontrolled resource consumption flaw was found in opens…6.5
• CVE-2022-32770A cross-site scripting (xss) vulnerability exists in the foo…6.1
• CVE-2022-32771A cross-site scripting (xss) vulnerability exists in the foo…6.1
• CVE-2022-32772A cross-site scripting (xss) vulnerability exists in the foo…6.1
• CVE-2022-32773An OS command injection vulnerability exists in the XCMD doD…9.8
• CVE-2022-32775An integer overflow vulnerability exists in the web interfac…8.8
• CVE-2022-32776Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerabili…4.8
• CVE-2022-32777An information disclosure vulnerability exists in the cookie…7.5
• CVE-2022-32778An information disclosure vulnerability exists in the cookie…7.5
• CVE-2022-32779Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2022-3278NULL Pointer Dereference in GitHub repository vim/vim prior …5.5