What is the CVSS score of CVE-2026-57249?

CVE-2026-57249 has a CVSS 3.1 base score of 7.8 (High). CVSS vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.1%.

Which versions of Foxit PDF Editor are affected by CVE-2026-57249?

Foxit PDF Editor and Foxit PDF Reader contain a use-after-free vulnerability (CVSS 7.8) that can crash the application when employees open malicious PDF files.

How to fix or mitigate CVE-2026-57249?

Within 24 hours: Inventory Foxit PDF Editor and Reader installations across the organization; send security alert to users advising against opening PDFs from untrusted sources and to use alternatives for critical workflows. Within 7 days: Disable JavaScript in PDF viewers (Foxit preferences), enforce application sandboxing via endpoint protection, and deploy file-type restrictions on email gateways to quarantine suspicious PDF attachments. Within 30 days: Monitor Foxit Security Advisories for patch availability; evaluate migration to alternative PDF readers (Adobe Acrobat with current patches, or open-source viewers like PDF-XChange Viewer) and establish a procurement plan if replacement is warranted.

Foxit PDF Editor CVE-2026-57249

EUVD-2026-42204 HIGH

Use After Free (CWE-416)

2026-07-08 Foxit

GHSA-f8mh-5vwp-p567

Memory Corruption Denial Of Service Use After Free Foxit Pdf Editor Foxit Pdf Reader

7.8

CVSS 3.1 · Vendor: Foxit

Severity by source

Vendor (Foxit) PRIMARY

7.8 HIGH

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

vuln.today AI

5.5 MEDIUM

Description states only a crash, so A:H with C/I:N; local crafted-file vector with required user interaction gives AV:L/UI:R, no privileges needed (PR:N).

3.1 AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

4.0 AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

Primary rating from Vendor (Foxit).

CVSS VectorVendor: Foxit

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Attack Vector

Local

Attack Complexity

Low

Privileges Required

None

User Interaction

Required

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Analysis Generated

Jul 08, 2026 - 09:00 vuln.today

DescriptionCVE.org

After the application opened the PDF file, the script first reset the annotation status, then triggered the reset form event by additional action. During the re-entry process, the application access invalid objects and crashed.

AnalysisAI

Use-after-free memory corruption in Foxit PDF Editor and Foxit PDF Reader allows a crafted PDF to crash the application when its embedded JavaScript resets annotation status and then triggers a reset-form additional action, causing the parser to re-enter and dereference freed objects. Local victims who open a malicious document are affected; the CVSS 3.1 base score is 7.8. …

Unlock full vulnerability intelligence

Risk assessment & exploitation conditions
Attack chain visualization
Remediation with exact patch versions
Threat intelligence from 22 sources
Personal watchlist & email alerts

Continue with Google Continue with GitHub

Free forever · No credit card required

Attack ChainAIDerived

Hypothetical attack flow derived from CVE metadata

Access

Deliver crafted PDF to victim

Delivery

Victim opens file in Foxit

Exploit

Script resets annotation status

Execution

Reset-form additional action re-enters

Persist

Dereference freed object (UAF)

Impact

Application crash / memory corruption

Access

Deliver crafted PDF to victim

Delivery

Victim opens file in Foxit

Exploit

Script resets annotation status

Execution

Reset-form additional action re-enters

Persist

Dereference freed object (UAF)

Impact

Application crash / memory corruption

Vulnerability AssessmentAI

Exploitation	Exploitation requires the victim to open a specially crafted PDF in Foxit PDF Editor or Foxit PDF Reader (UI:R in the vector), and that PDF must contain embedded JavaScript/additional actions that first reset annotation status and then trigger a reset-form additional action - the exact sequence that drives the re-entry into freed objects. … Additional conditions and limiting factors are described in the full assessment.
Risk Assessment	The supplied CVSS 3.1 vector (AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H = 7.8) models a local, low-complexity, unauthenticated attack requiring user interaction (opening a file), with full confidentiality/integrity/availability impact - consistent with memory corruption that could go beyond a crash. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in.
Exploit Scenario	An attacker emails or hosts a booby-trapped PDF whose embedded JavaScript resets annotation status and then invokes a reset-form additional action; when the victim opens it in a vulnerable Foxit build, the re-entry path dereferences a freed object and the application crashes (denial of service), with potential for further memory-corruption exploitation. No public exploit code was identified at time of analysis, and successful exploitation requires the user to open the file.
Remediation	Update Foxit PDF Editor and Foxit PDF Reader to the fixed release identified in the Foxit security bulletin (https://www.foxit.com/support/security-bulletins.html); an exact fix version is not present in the provided data, so consult that advisory for the patched build - Patch available per vendor advisory. … Detailed patch versions, workarounds, and compensating controls in full report.

Recommended ActionAI

Within 24 hours: Inventory Foxit PDF Editor and Reader installations across the organization; send security alert to users advising against opening PDFs from untrusted sources and to use alternatives for critical workflows. …

Threat intelligence, references, and detailed analysis are available after sign-in.