What is the CVSS score of CVE-2026-57246?

CVE-2026-57246 has a CVSS 3.1 base score of 7.8 (High). CVSS vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.1%.

Which versions of Foxit Pdf Editor are affected by CVE-2026-57246?

Foxit PDF Reader and PDF Editor contain a high-severity memory corruption vulnerability in their digital-signature verification system that could allow code execution when a user opens a malicious…

How to fix or mitigate CVE-2026-57246?

Within 24 hours: Audit all Foxit PDF Reader and Editor installations across the organization and notify users to avoid opening PDFs from untrusted sources. Within 7 days: Restrict Foxit use to essential workflows only; migrate users to patched alternatives such as Adobe Acrobat Reader DC 24.x or browser-based PDF viewers where functionality permits. Within 30 days: Monitor Foxit security advisories for patch availability; evaluate permanent replacement of Foxit with alternative PDF tools; review logs for suspicious PDF-related incidents.

Foxit Pdf Editor CVE-2026-57246

EUVD-2026-42206 HIGH

Classic Buffer Overflow (CWE-120)

2026-07-08 Foxit

GHSA-hmr8-g2c8-fphv

Buffer Overflow Foxit Pdf Editor Foxit Pdf Reader

7.8

CVSS 3.1 · Vendor: Foxit

Severity by source

Vendor (Foxit) PRIMARY

7.8 HIGH

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Primary rating from Vendor (Foxit) · only source for this CVE.

CVSS VectorVendor: Foxit

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Attack Vector

Local

Attack Complexity

Low

Privileges Required

None

User Interaction

Required

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Analysis Generated

Jul 08, 2026 - 09:05 vuln.today

DescriptionCVE.org

When dealing with abnormally constructed objects, there is a lack of argument validation; JavaScript triggers signature verification, but the signature plugin does not perform validation when copying the abnormal string, causing the application to crash.

AnalysisAI

Memory-corruption (buffer overflow) in Foxit PDF Reader and Foxit PDF Editor arises when the digital-signature plugin processes abnormally constructed signature objects: JavaScript triggers signature verification, but the plugin copies an anomalous string without validating its arguments, corrupting memory. A local victim who opens a crafted PDF is affected, and while the vendor describes the outcome as an application crash, the CVSS High confidentiality/integrity/availability impacts indicate potential for code execution. …

Unlock full vulnerability intelligence

Risk assessment & exploitation conditions
Attack chain visualization
Remediation with exact patch versions
Threat intelligence from 22 sources
Personal watchlist & email alerts

Continue with Google Continue with GitHub

Free forever · No credit card required

Recommended ActionAI

Within 24 hours: Audit all Foxit PDF Reader and Editor installations across the organization and notify users to avoid opening PDFs from untrusted sources. …

Threat intelligence, references, and detailed analysis are available after sign-in.