Security readout for executives and security teams
Plain-English summary
CVE-2021-33793 affects older Foxit Reader and Foxit PhantomPDF versions before 10.1.4. A flaw in Office document conversion can mishandle a cross-reference table and write outside expected memory bounds. The source bundle does not provide CVSS scoring or confirmed business impact.
Executive priority
Set priority after inventory. If affected Foxit versions are present, remediate in the normal vulnerability window and accelerate for users who process untrusted Office documents. The missing CVSS and exploit evidence limit confidence in urgency.
Technical view
The vulnerability is described as an out-of-bounds write in Foxit Reader and PhantomPDF before 10.1.4, triggered by mishandling the Cross-Reference table during Office document conversion. Available sources do not include exploit primitives, affected platforms, CVSS vector, or vendor mitigation detail beyond the version boundary.
Likely exposure
Organizations are likely exposed if they still run Foxit Reader or PhantomPDF versions earlier than 10.1.4, especially where Office document conversion is used. Exposure cannot be assessed from product names alone because the bundle lacks platform and deployment details.
Exploitation context
The source bundle does not show CISA KEV listing, active exploitation, public exploit availability, or observed attacks. Treat exploitation status as unconfirmed, not absent. The vulnerability class is memory-corruption related, but practical exploitability is not established by the supplied sources.
Researcher notes
Evidence is thin: NVD-style summary, version boundary, and a Foxit bulletin reference only. No CWE, CVSS, proof-of-concept, exploit status, crash details, or patch notes are included in the bundle. Avoid asserting code execution or active exploitation without additional vendor or threat intelligence sources.
Mitigation direction
- Upgrade Foxit Reader and PhantomPDF installations to version 10.1.4 or later.
- Review Foxit security bulletins for vendor-specific remediation guidance.
- Prioritize systems that convert Office documents using affected Foxit products.
- Restrict unnecessary document conversion on systems awaiting update.
Validation and detection
- Inventory Foxit Reader and PhantomPDF versions across managed endpoints.
- Flag any installation older than 10.1.4 as potentially affected.
- Confirm whether Office document conversion is enabled or used operationally.
- Check vendor bulletin records for CVE-2021-33793 remediation notes.
Public sources used
Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.
Conservative CVE-to-ATT&CK context
These mappings and lookup hints may be relevant to the vulnerability behavior, CWE, affected product, or exposure path. Glexia-inferred context is not an official MITRE, ATT&CK, CWE, or CVE Program mapping.
ATT&CK lookup starting points
Use these exact CWE pages and searches to review the Glexia ATT&CK library from this CVE's weakness and description context.
CVE-2021-33793 mapping review
Open the CVE-to-ATT&CK bridge for reviewed, inferred, or future official mappings tied to this CVE.
Open ATT&CK lookup- Severity
- Unknown
- CVSS
- Not scored
- Known Exploited
- No
- Published
CNA and ADP enrichment extracted from CVE v5
These fields come from the CVE record and ADP containers, not from Glexia's Take. They preserve time-varying source decisions such as CISA SSVC, KEV status, CVSS metrics, and provider references.
CVSS and timeline data
No CVSS vectors or timeline events were available in the normalized CVE source material.
Source materials
- CVE List V5 sourceCVE List V5
- https://www.foxitsoftware.com/support/security-bulletins.htmlCVE reference · x_refsource_MISC
Products and packages named in the record
CWE details
CWE links open Glexia weakness intelligence pages with official CWE context, developer remediation guidance, and related CVE mappings.