What is the CVSS score of CVE-2026-57250?

CVE-2026-57250 has a CVSS 3.1 base score of 7.8 (High). CVSS vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.1%.

Which versions of Foxit PDF Editor are affected by CVE-2026-57250?

Foxit PDF Reader and Editor are vulnerable to a memory corruption attack delivered through malicious PDF files, with no patch currently available.

How to fix or mitigate CVE-2026-57250?

Within 24 hours: Inventory Foxit deployments and alert users to avoid opening PDFs from untrusted sources. Within 7 days: Disable JavaScript execution in Foxit (Preferences > JavaScript > Disable) and subscribe to Foxit security advisories for patch notifications. Within 30 days: Evaluate alternative PDF readers or implement network controls restricting Foxit usage to read-only access with external documents isolated to dedicated workstations.

Foxit PDF Editor CVE-2026-57250

EUVD-2026-42193 HIGH

Use After Free (CWE-416)

2026-07-08 Foxit

GHSA-2mpx-xxgw-cq6p

Memory Corruption Denial Of Service Use After Free Foxit Pdf Editor Foxit Pdf Reader

7.8

CVSS 3.1 · Vendor: Foxit

Severity by source

Vendor (Foxit) PRIMARY

7.8 HIGH

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

vuln.today AI

7.8 HIGH

Local malicious-file vector (AV:L) needing the user to open a PDF (UI:R) with no privileges (PR:N); use-after-free supports high impact, though the described outcome is a crash.

3.1 AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

4.0 AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Primary rating from Vendor (Foxit).

CVSS VectorVendor: Foxit

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Attack Vector

Local

Attack Complexity

Low

Privileges Required

None

User Interaction

Required

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Analysis Generated

Jul 08, 2026 - 08:59 vuln.today

DescriptionCVE.org

When the application opens a PDF and JavaScript resets the form fields, the script re-enters the interface. The underlying native object is damaged, but the application does not perform validation. The function call on the damaged object leads to the application crashing.

AnalysisAI

Use-after-free memory corruption in Foxit PDF Editor and Foxit PDF Reader is triggered when JavaScript embedded in a malicious PDF resets form fields and re-enters the interface, causing the application to invoke a method on a freed native object. An attacker who convinces a user to open a crafted PDF can crash the application, and because the flaw is a use-after-free (CWE-416), it carries potential for memory-corruption abuse beyond denial of service. …

Unlock full vulnerability intelligence

Risk assessment & exploitation conditions
Attack chain visualization
Remediation with exact patch versions
Threat intelligence from 22 sources
Personal watchlist & email alerts

Continue with Google Continue with GitHub

Free forever · No credit card required

Attack ChainAIDerived

Hypothetical attack flow derived from CVE metadata

Access

Deliver crafted PDF to victim

Delivery

Victim opens file in Foxit

Exploit

JavaScript resets form fields

Execution

Native object freed and re-entered

Persist

Method call on dangling object

Impact

Memory corruption crashes application

Access

Deliver crafted PDF to victim

Delivery

Victim opens file in Foxit

Exploit

JavaScript resets form fields

Execution

Native object freed and re-entered

Persist

Method call on dangling object

Impact

Memory corruption crashes application

Vulnerability AssessmentAI

Exploitation	Exploitation requires the victim to open a maliciously crafted PDF in Foxit PDF Editor or Foxit PDF Reader, and requires that JavaScript execution is enabled in the client (the default) so the embedded script can call the form-field reset routine that frees the native object. … Additional conditions and limiting factors are described in the full assessment.
Risk Assessment	The CVSS 3.1 vector (AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H, base 7.8) reflects a local attack vector requiring user interaction - the victim must open a malicious PDF - with no privileges needed and high impact to confidentiality, integrity, and availability. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in.
Exploit Scenario	An attacker emails or hosts a booby-trapped PDF containing JavaScript that calls a form-reset routine; when the victim opens it in Foxit PDF Editor or Reader, the script frees and then re-uses a native object, corrupting memory and crashing the application. Because this is a use-after-free, a skilled attacker could attempt to groom the heap to control the freed allocation and escalate the crash toward code execution. …
Remediation	Patch available per vendor advisory: upgrade Foxit PDF Editor and Foxit PDF Reader to the fixed build listed on Foxit's security bulletin at https://www.foxit.com/support/security-bulletins.html (the input data does not include an exact fixed version number, so confirm the target build against that advisory before deployment). … Detailed patch versions, workarounds, and compensating controls in full report.