What is the CVSS score of CVE-2026-57252?

CVE-2026-57252 has a CVSS 3.1 base score of 7.8 (High). CVSS vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.1%.

Which versions of Foxit PDF Reader are affected by CVE-2026-57252?

Foxit PDF Reader and Editor contain a use-after-free vulnerability (CVSS 7.8) enabling application crashes and potential code execution when users open malicious PDF files with embedded JavaScript.

How to fix or mitigate CVE-2026-57252?

Within 24 hours: identify all Foxit PDF Reader and Editor deployments and disable JavaScript execution in application preferences. Within 7 days: implement policies restricting PDF opening to trusted sources only and evaluate alternative PDF readers for critical workflows. Within 30 days: monitor Foxit security advisories for patch availability and prepare rapid deployment procedures.

Foxit PDF Reader CVE-2026-57252

EUVD-2026-42200 HIGH

Use After Free (CWE-416)

2026-07-08 Foxit

GHSA-9428-wgmv-2fjj

Memory Corruption Denial Of Service Use After Free Foxit Pdf Editor Foxit Pdf Reader

7.8

CVSS 3.1 · Vendor: Foxit

Severity by source

Vendor (Foxit) PRIMARY

7.8 HIGH

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

vuln.today AI

7.8 HIGH

Local file-open vector (AV:L/UI:R) with no privileges (PR:N); UAF plausibly yields code execution so C/I/A retained High, though the description alone shows only a crash.

3.1 AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

4.0 AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Primary rating from Vendor (Foxit).

CVSS VectorVendor: Foxit

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Attack Vector

Local

Attack Complexity

Low

Privileges Required

None

User Interaction

Required

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Analysis Generated

Jul 08, 2026 - 08:56 vuln.today

DescriptionCVE.org

When the application opens a PDF file, during the process of JavaScript deleting pages and removing attachment annotations, it will cause the attachment panel to continue accessing invalid pointers, eventually leading to the application crashing.

AnalysisAI

Use-after-free memory corruption in Foxit PDF Reader and Foxit PDF Editor allows a crafted PDF to crash the application when its embedded JavaScript deletes pages and removes attachment annotations while the attachment panel still references freed pointers. A victim must open the malicious document (UI:R), and no public exploit has been identified at time of analysis. …

Unlock full vulnerability intelligence

Risk assessment & exploitation conditions
Attack chain visualization
Remediation with exact patch versions
Threat intelligence from 22 sources
Personal watchlist & email alerts

Continue with Google Continue with GitHub

Free forever · No credit card required

Attack ChainAIDerived

Hypothetical attack flow derived from CVE metadata

Access

Craft PDF with malicious JavaScript

Delivery

Deliver PDF to victim (email/web)

Exploit

Victim opens file in Foxit

Execution

JS deletes pages and attachment annotations

Persist

Attachment panel dereferences freed pointers

Impact

Application crash or potential code execution

Access

Craft PDF with malicious JavaScript

Delivery

Deliver PDF to victim (email/web)

Exploit

Victim opens file in Foxit

Execution

JS deletes pages and attachment annotations

Persist

Attachment panel dereferences freed pointers

Impact

Application crash or potential code execution

Vulnerability AssessmentAI

Exploitation	Exploitation requires the victim to open a specially crafted PDF in Foxit PDF Reader or Foxit PDF Editor, and requires that document JavaScript execution is enabled (the default) so the malicious script can delete pages and remove attachment annotations. … Additional conditions and limiting factors are described in the full assessment.
Risk Assessment	The CVSS vector CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H yields 7.8 (High): local attack vector, low complexity, no privileges, but required user interaction (opening a file). … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in.
Exploit Scenario	An attacker emails or hosts a booby-trapped PDF containing JavaScript that deletes pages and removes attachment annotations; when the victim opens it in Foxit PDF Reader or Editor, the attachment panel dereferences freed pointers and the application crashes, with potential escalation to code execution given the use-after-free primitive. No public exploit code is currently identified, so exploitation would require the attacker to develop the technique independently.
Remediation	Apply the vendor update from the Foxit security bulletin at https://www.foxit.com/support/security-bulletins.html; a specific fixed version is not included in the provided data, so consult that advisory for the exact patched release and upgrade both Foxit PDF Reader and Foxit PDF Editor to it. … Detailed patch versions, workarounds, and compensating controls in full report.