CVE-2021-31455: 
Foxit PDF Reader vulnerability analysis and mitigation

CVE-2021-31455 is a Use-After-Free vulnerability discovered in Foxit Reader version 10.1.1.37576. The vulnerability was reported on March 3, 2021, and publicly disclosed on May 7, 2021. This security flaw affects Foxit Reader installations and requires user interaction to be exploited (ZDI Advisory).

The vulnerability exists within the handling of XFA forms in Foxit Reader. The specific flaw results from the lack of validating the existence of an object prior to performing operations on the object. The vulnerability has been assigned a CVSS score of 7.8 (AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H), indicating a high severity level (ZDI Advisory).

An attacker who successfully exploits this vulnerability can execute arbitrary code in the context of the current process on affected installations of Foxit Reader. The high CVSS score indicates potential severe impacts on system confidentiality, integrity, and availability (ZDI Advisory).

The vulnerability requires user interaction to be exploited, specifically the target must visit a malicious page or open a malicious file. The attack complexity is considered low, requiring no special access privileges for exploitation (ZDI Advisory).

Foxit has issued an update to correct this vulnerability. Users are advised to update their Foxit Reader installations to the latest version available through the official Foxit support website (ZDI Advisory).