Findings

CVE-2025-55310

An issue was discovered in Foxit PDF and Editor for Windows and macOS before 13.2 and 2025 before 2025.2.

Published Dec 11, 2025 · updated Oct 14, 2026 · foxit pdf editor

An issue was discovered in Foxit PDF and Editor for Windows and macOS before 13.2 and 2025 before 2025.2. An attacker able to alter or replace the static HTML files used by the StartPage feature can cause the application to load malicious or compromised content upon startup. This may result in information disclosure, unauthorized data access, or other security impacts.

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

  1. Dec 11, 2025 · NIST NVD

    Detected

    An issue was discovered in Foxit PDF and Editor for Windows and macOS before 13.2 and 2025 before 2025.2. An attacker able to alter or replace the static HTML files used by the StartPage feature can cause the application to load malicious or compromised content upon startup. This may result in information disclosure, unauthorized data access, or other security impacts.

  2. Oct 14, 2026 · NIST NVD

    Updated

    An issue was discovered in Foxit PDF and Editor for Windows and macOS before 13.2 and 2025 before 2025.2. An attacker able to alter or replace the static HTML files used by the StartPage feature can cause the application to load malicious or compromised content upon startup. This may result in information disclosure, unauthorized data access, or other security impacts.

Affected

  • cpe foxit/pdf editorversion unspecified
  • cpe foxit/pdf editor2025.1.0.66692
  • cpe foxit/pdf readerversion unspecified

Sources

  • CVE.orgVulnerability recordCVE-2025-55310

    Official CVE identifier

    cve.org
  • FIRST EPSSExploitation probabilityCVE-2025-55310

    30-day exploitation probability 0.1%

    first.org
  • NIST NVDVulnerability recordCVE-2025-55310

    An issue was discovered in Foxit PDF and Editor for Windows and macOS before 13.2 and 2025 before 2025.2. An attacker able to alter or replace the static HTML files used by the StartPage feature can cause the application to load malicious or compromised content upon startup. This

    nvd.nist.gov

References

CVE-2025-55310 · ZeroDay Findings