Foxit PDF Reader CVE-2026-57252

Exploitation requires the victim to open a specially crafted PDF in Foxit PDF Reader or Foxit PDF Editor, and requires that document JavaScript execution is enabled (the default) so the malicious script can delete pages and remove attachment annotations. The triggering path further depends on the attachment panel being active and accessing the removed attachment annotations. Limiting factors: the attack vector is local (AV:L) - the attacker cannot trigger this remotely without the user opening the file (UI:R) - and disabling JavaScript actions in Foxit neutralizes the trigger entirely.

The CVSS vector CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H yields 7.8 (High): local attack vector, low complexity, no privileges, but required user interaction (opening a file). There is no EPSS score, no CISA KEV listing, and no public exploit identified, so real-world exploitation pressure appears low and there is no evidence of active exploitation. A notable tension exists in the data: the description states the outcome is only an application crash (consistent with the Denial Of Service tag), yet the CVSS impact metrics are C:H/I:H/A:H, which normally signals code execution rather than a mere crash. Use-after-free bugs are frequently escalatable from crash to code execution, so the High impact rating is plausible but not confirmed by the description alone - verify exploitability with the Foxit advisory. Overall this is a moderate-priority patch item: dangerous file-format memory corruption in widely used software, but gated behind user interaction and with no signs of in-the-wild abuse.

An attacker emails or hosts a booby-trapped PDF containing JavaScript that deletes pages and removes attachment annotations; when the victim opens it in Foxit PDF Reader or Editor, the attachment panel dereferences freed pointers and the application crashes, with potential escalation to code execution given the use-after-free primitive. No public exploit code is currently identified, so exploitation would require the attacker to develop the technique independently.