What is the CVSS score of CVE-2026-57249?

CVE-2026-57249 has a CVSS 3.1 base score of 7.8 (High). CVSS vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.1%.

Which versions of Foxit PDF Editor are affected by CVE-2026-57249?

Foxit PDF Editor and Foxit PDF Reader contain a use-after-free vulnerability (CVSS 7.8) that can crash the application when employees open malicious PDF files.

How to fix or mitigate CVE-2026-57249?

Within 24 hours: Inventory Foxit PDF Editor and Reader installations across the organization; send security alert to users advising against opening PDFs from untrusted sources and to use alternatives for critical workflows. Within 7 days: Disable JavaScript in PDF viewers (Foxit preferences), enforce application sandboxing via endpoint protection, and deploy file-type restrictions on email gateways to quarantine suspicious PDF attachments. Within 30 days: Monitor Foxit Security Advisories for patch availability; evaluate migration to alternative PDF readers (Adobe Acrobat with current patches, or open-source viewers like PDF-XChange Viewer) and establish a procurement plan if replacement is warranted.

Foxit PDF Editor CVE-2026-57249

EUVD-2026-42204 HIGH

Use After Free (CWE-416)

2026-07-08 Foxit

GHSA-f8mh-5vwp-p567

Denial Of Service Use After Free Memory Corruption Foxit Pdf Editor Foxit Pdf Reader Foxit Software Inc

7.8

CVSS 3.1 · Vendor: Foxit

Severity by source

Vendor (Foxit) PRIMARY

7.8 HIGH

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

vuln.today AI

5.5 MEDIUM

Description states only a crash, so A:H with C/I:N; local crafted-file vector with required user interaction gives AV:L/UI:R, no privileges needed (PR:N).

3.1 AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

4.0 AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

Primary rating from Vendor (Foxit).

CVSS VectorVendor: Foxit

Attack Vector

Local

Attack Complexity

Low

Privileges Required

None

User Interaction

Required

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Analysis Generated

Jul 08, 2026 - 09:00 vuln.today

DescriptionCVE.org

After the application opened the PDF file, the script first reset the annotation status, then triggered the reset form event by additional action. During the re-entry process, the application access invalid objects and crashed.

AnalysisAI

Use-after-free memory corruption in Foxit PDF Editor and Foxit PDF Reader allows a crafted PDF to crash the application when its embedded JavaScript resets annotation status and then triggers a reset-form additional action, causing the parser to re-enter and dereference freed objects. Local victims who open a malicious document are affected; the CVSS 3.1 base score is 7.8. No public exploit was identified at time of analysis, and the issue is not listed in CISA KEV.

Technical ContextAI

The flaw is a CWE-416 Use-After-Free in the PDF rendering/JavaScript engine shared by Foxit PDF Editor and Foxit PDF Reader (per CPE cpe:2.3:a:foxit_software_inc.:foxit_pdf_editor and :foxit_pdf_reader). PDF documents can carry additional actions (AA) attached to form fields and annotations; here a script resets annotation state and then fires a 'reset form' additional action. During the resulting re-entry, an object freed earlier in the flow is accessed again, so a dangling pointer is dereferenced. Use-after-free conditions in document parsers are a classic memory-corruption primitive: at minimum they cause a crash (denial of service), and depending on heap grooming they can escalate to controlled memory reuse.

RemediationAI

Update Foxit PDF Editor and Foxit PDF Reader to the fixed release identified in the Foxit security bulletin (https://www.foxit.com/support/security-bulletins.html); an exact fix version is not present in the provided data, so consult that advisory for the patched build - Patch available per vendor advisory. As compensating controls until patched: disable JavaScript execution in Foxit (Preferences > JavaScript, uncheck 'Enable JavaScript Actions'), which neutralizes the script-driven reset-form additional action that triggers the use-after-free, at the cost of breaking legitimate interactive/JavaScript-enabled forms; enable Foxit's Safe Reading Mode to restrict scripted and unverified actions; and restrict opening of PDFs from untrusted sources via email/download policy or attachment sandboxing. Do not invent a version number - cite the vendor bulletin for the exact patched build.