CVE-2026-57237

HIGH7.8

Foxit PDF Editor/Reader Annotation Use-After-Free Remote Code Execution Vulnerability

Published Jul 8, 2026

Modified 3 months ago

Details

When the application opens a PDF and JavaScript modifies the properties of form fields, it causes the state of the underlying objects referenced by the program to become invalid. Eventually, it reads an illegal memory address, which leads to the crash of the application.

Affected Packages

Foxit PDF Editor

Windows 10 (1507)Windows 10 (1607) / Server 2016Windows 10 (1703)Windows 10 (1709)Windows 10 (1803)

Foxit PDF Reader

Windows 10 (1507)Windows 10 (1607) / Server 2016Windows 10 (1703)Windows 10 (1709)Windows 10 (1803)

Foxit Reader

Windows 10 (1507)Windows 10 (1607) / Server 2016Windows 10 (1703)Windows 10 (1709)Windows 10 (1803)

福昕高级PDF编辑器

Windows 10 (1507)Windows 10 (1607) / Server 2016Windows 10 (1703)Windows 10 (1709)Windows 10 (1803)

References

ADVISORY

https://www.cve.org/CVERecord?id=CVE-2026-57237