← Database

CVE-2021-38570

CRITICAL CVSS: 9.1 Published: 2021-08-11 Modified: 2026-06-17

Description

An issue was discovered in Foxit Reader and PhantomPDF before 10.1.4. It allows attackers to delete arbitrary files (during uninstallation) via a symlink.

Affected Platforms

Foxitsoftware PhantompdfFoxitsoftware Foxit Reader

Weakness Type

CWE-59

References