CVE-2026-57244
Status: AnalyzedHigh (7.8)—
After JavaScript resetting the form, the synchronization process lacks re-entry protection and object lifecycle verification, resulting in the failure of the control pointer during the traversal process. After the pointer fails, it still continues to dereference, causing the application to crash.
CVSS
- Version: 3.1
- Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
- Base score: 7.8
Exploitation probability (EPSS)
- Probability of exploitation in the next 30 days: 0.17%
- Percentile among all scored CVEs: 6
- Score date: 10/4/2026
EPSS (Exploit Prediction Scoring System, FIRST) estimates how likely a vulnerability is to be exploited in the wild within 30 days. It complements CVSS (impact) and CISA KEV (confirmed exploitation).
🎯 ATT&CK techniques
How this vulnerability is exploited and what the attacker gains, in MITRE ATT&CK terms.
- Exploitation
T1203Exploitation for Client Executionexecution85 % - Primary impact
T1059Command and Scripting Interpreterexecution75 % - Secondary impact
T1499.004Application or System Exploitationimpact80 %
AV:L + UI:R indica ejecución en cliente; el fallo de sincronización de objetos tras JavaScript en formularios PDF causa dereferenciación de puntero fallido (use-after-free, CWE-416) que permite ejecución de código o DoS de aplicación.
Inferred by our analysis agent from the official description, CVSS vector and CWE, and checked by a supervisor. May contain errors.
🛡️ ATT&CK mitigations that cover these techniques
Affected technologies (2)
CWEs
- CWE-416
References
Raw JSON (NVD)
Show
{
"id": "CVE-2026-57244",
"cveTags": [],
"metrics": {
"ssvcV203": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"ssvcData": {
"id": "CVE-2026-57244",
"role": "CISA Coordinator",
"options": [
{
"exploitation": "none"
},
{
"automatable": "no"
},
{
"technicalImpact": "total"
}
],
"version": "2.0.3",
"timestamp": "2026-07-08T13:14:43.136775Z"
}
}
],
"cvssMetricV31": [
{
"type": "Secondary",
"source": "14984358-7092-470d-8f34-ade47a7658a2",
"cvssData": {
"scope": "UNCHANGED",
"version": "3.1",
"baseScore": 7.8,
"attackVector": "LOCAL",
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"integrityImpact": "HIGH",
"userInteraction": "REQUIRED",
"attackComplexity": "LOW",
"availabilityImpact": "HIGH",
"privilegesRequired": "NONE",
"confidentialityImpact": "HIGH"
},
"impactScore": 5.9,
"exploitabilityScore": 1.8
}
]
},
"affected": [
{
"source": "14984358-7092-470d-8f34-ade47a7658a2",
"affectedData": [
{
"vendor": "Foxit Software Inc.",
"product": "Foxit PDF Editor",
"versions": [
{
"status": "affected",
"version": "Versions 2026.1.1 and earlier"
},
{
"status": "affected",
"version": "Versions 14.0.4 and earlier"
},
{
"status": "affected",
"version": "Versions 13.2.4 and earlier"
}
],
"platforms": [
"Windows"
],
"defaultStatus": "unaffected"
},
{
"vendor": "Foxit Software Inc.",
"product": "Foxit PDF Editor",
"versions": [
{
"status": "affected",
"version": "Versions 2026.1.1 and earlier"
},
{
"status": "affected",
"version": "Versions 14.0.3 and earlier"
},
{
"status": "affected",
"version": "Versions 13.2.3 and earlier"
}
],
"platforms": [
"MacOS"
],
"defaultStatus": "unaffected"
},
{
"vendor": "Foxit Software Inc.",
"product": "Foxit PDF Reader",
"versions": [
{
"status": "affected",
"version": "Versions 2026.1.1 and earlier"
}
],
"platforms": [
"Windows",
"MacOS"
],
"defaultStatus": "unaffected"
}
]
}
],
"published": "2026-07-08T09:16:32.387",
"references": [
{
"url": "https://www.foxit.com/support/security-bulletins.html",
"tags": [
"Vendor Advisory"
],
"source": "14984358-7092-470d-8f34-ade47a7658a2"
}
],
"vulnStatus": "Analyzed",
"weaknesses": [
{
"type": "Secondary",
"source": "14984358-7092-470d-8f34-ade47a7658a2",
"description": [
{
"lang": "en",
"value": "CWE-416"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "After JavaScript resetting the form, the synchronization process lacks re-entry protection and object lifecycle verification, resulting in the failure of the control pointer during the traversal process. After the pointer fails, it still continues to dereference, causing the application to crash."
}
],
"lastModified": "2026-07-09T13:22:48.437",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:foxit:pdf_editor:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4AED7415-0393-4DF2-BEE8-486712D56288",
"versionEndIncluding": "13.2.4.24048"
},
{
"criteria": "cpe:2.3:a:foxit:pdf_editor:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A10F7B1A-AAB3-4D81-A08C-866C49C76506",
"versionEndIncluding": "14.0.4.33508",
"versionStartIncluding": "14.0.0.33046"
},
{
"criteria": "cpe:2.3:a:foxit:pdf_editor:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0C75FEE6-54F3-49C6-BAEA-A09D23BE5D64",
"versionEndIncluding": "2023.3.0.23028",
"versionStartIncluding": "2023.1.0.15510"
},
{
"criteria": "cpe:2.3:a:foxit:pdf_editor:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2C06BC41-9831-4AE3-B10B-3FC313D01580",
"versionEndIncluding": "2024.4.1.27687",
"versionStartIncluding": "2024.1.0.23997"
},
{
"criteria": "cpe:2.3:a:foxit:pdf_editor:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "AD0AAFC0-5B9B-4A11-8967-4699792850F1",
"versionEndIncluding": "2025.3.0.35737",
"versionStartIncluding": "2025.1.0.27937"
},
{
"criteria": "cpe:2.3:a:foxit:pdf_editor:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "BB50B54F-D08D-492E-8CDF-D76032F4F9C5",
"versionEndIncluding": "2026.1.1.36485",
"versionStartIncluding": "2026.1.0.36452"
},
{
"criteria": "cpe:2.3:a:foxit:pdf_reader:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "BF5DF56E-0DAD-4D0F-B64C-F41611D64981",
"versionEndIncluding": "2026.1.1.36485"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "A2572D17-1DE6-457B-99CC-64AFD54487EA"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:foxit:pdf_editor:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4DCCFD60-850F-48C4-A535-39D98B28C837",
"versionEndIncluding": "13.2.3.63444"
},
{
"criteria": "cpe:2.3:a:foxit:pdf_editor:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "75B69039-9E98-4CE7-B47A-750BCE8DB517",
"versionEndIncluding": "14.0.3.69295",
"versionStartIncluding": "14.0.0.68868"
},
{
"criteria": "cpe:2.3:a:foxit:pdf_editor:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D8785CCE-C44C-4908-9133-13A580D5BECB",
"versionEndIncluding": "2023.3.0.63083",
"versionStartIncluding": "2023.1.0.55583"
},
{
"criteria": "cpe:2.3:a:foxit:pdf_editor:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "CF043D20-0E28-481C-8756-D1301FAE67D2",
"versionEndIncluding": "2024.4.1.66479",
"versionStartIncluding": "2024.1.0.63682"
},
{
"criteria": "cpe:2.3:a:foxit:pdf_editor:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "20698FD4-5E28-4206-ACEA-4FCD24AD23BE",
"versionEndIncluding": "2025.3.0.69570",
"versionStartIncluding": "2025.1.0.66692"
},
{
"criteria": "cpe:2.3:a:foxit:pdf_editor:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "457731AE-E9EB-424F-9311-BA76EB6985E0",
"versionEndIncluding": "2026.1.1.70276",
"versionStartIncluding": "2026.1.0.70169"
},
{
"criteria": "cpe:2.3:a:foxit:pdf_reader:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "DC0C84D7-624B-4608-BEBD-39BBB478819D",
"versionEndIncluding": "2026.1.1.70276"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "387021A0-AF36-463C-A605-32EA7DAC172E"
}
],
"operator": "OR"
}
],
"operator": "AND"
}
],
"sourceIdentifier": "14984358-7092-470d-8f34-ade47a7658a2"
}