What is the CVSS score of EUVD-2026-42193?

EUVD-2026-42193 has a CVSS 3.1 base score of 7.8 (High). CVSS vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.1%.

Which versions of Foxit PDF Editor are affected by EUVD-2026-42193?

Foxit PDF Reader and Editor are vulnerable to a memory corruption attack delivered through malicious PDF files, with no patch currently available.

How to fix or mitigate EUVD-2026-42193?

Within 24 hours: Inventory Foxit deployments and alert users to avoid opening PDFs from untrusted sources. Within 7 days: Disable JavaScript execution in Foxit (Preferences > JavaScript > Disable) and subscribe to Foxit security advisories for patch notifications. Within 30 days: Evaluate alternative PDF readers or implement network controls restricting Foxit usage to read-only access with external documents isolated to dedicated workstations.

Foxit PDF Editor EUVD-2026-42193

| CVE-2026-57250 HIGH

Use After Free (CWE-416)

2026-07-08 Foxit

GHSA-2mpx-xxgw-cq6p

Denial Of Service Use After Free Memory Corruption Foxit Pdf Editor Foxit Pdf Reader Foxit Software Inc

7.8

CVSS 3.1 · Vendor: Foxit

Severity by source

Vendor (Foxit) PRIMARY

7.8 HIGH

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

vuln.today AI

7.8 HIGH

Local malicious-file vector (AV:L) needing the user to open a PDF (UI:R) with no privileges (PR:N); use-after-free supports high impact, though the described outcome is a crash.

3.1 AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

4.0 AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Primary rating from Vendor (Foxit).

CVSS VectorVendor: Foxit

Attack Vector

Local

Attack Complexity

Low

Privileges Required

None

User Interaction

Required

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Analysis Generated

Jul 08, 2026 - 08:59 vuln.today

DescriptionCVE.org

When the application opens a PDF and JavaScript resets the form fields, the script re-enters the interface. The underlying native object is damaged, but the application does not perform validation. The function call on the damaged object leads to the application crashing.

AnalysisAI

Use-after-free memory corruption in Foxit PDF Editor and Foxit PDF Reader is triggered when JavaScript embedded in a malicious PDF resets form fields and re-enters the interface, causing the application to invoke a method on a freed native object. An attacker who convinces a user to open a crafted PDF can crash the application, and because the flaw is a use-after-free (CWE-416), it carries potential for memory-corruption abuse beyond denial of service. No public exploit identified at time of analysis, and the issue is not listed in CISA KEV.

Technical ContextAI

The vulnerability lives in the JavaScript-driven form-handling engine of Foxit's PDF applications, which expose a scripting interface (resetForm and related field-manipulation APIs) that operate on underlying native C/C++ objects. When the reset routine executes, it re-enters the interface and destroys/frees the backing native object, but the application fails to validate the object's lifetime before a subsequent function call dereferences it - the classic CWE-416 use-after-free pattern. Affected CPEs are cpe:2.3:a:foxit_software_inc.:foxit_pdf_editor and cpe:2.3:a:foxit_software_inc.:foxit_pdf_reader, both desktop PDF clients that parse untrusted documents and embedded JavaScript. Use-after-free in a document parser is significant because the freed memory can potentially be reclaimed and controlled, turning a crash primitive into an exploitable condition.

RemediationAI

Patch available per vendor advisory: upgrade Foxit PDF Editor and Foxit PDF Reader to the fixed build listed on Foxit's security bulletin at https://www.foxit.com/support/security-bulletins.html (the input data does not include an exact fixed version number, so confirm the target build against that advisory before deployment). As a compensating control until patched, disable JavaScript execution in the affected clients (Preferences > JavaScript > uncheck 'Enable JavaScript Actions'), which directly removes the reset-form script path that triggers the use-after-free - the trade-off is that legitimate interactive/JavaScript-enabled forms will stop functioning. Additionally, restrict opening of PDFs from untrusted sources and consider rendering untrusted PDFs in a sandboxed or browser-based viewer, accepting reduced fidelity for advanced Foxit features.