CVE-2026-57244

EUVD-2026-42195
After JavaScript resetting the form, the synchronization process lacks re-entry protection and object lifecycle verification, resulting in the failure of the control pointer during the traversal process. After the pointer fails, it still continues to dereference, causing the application to crash.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
7.8 HIGH
LOCAL
LOW
NONE
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 1.86%
Affected Products (NVD)
VendorProductVersion
foxitpdf_editor
𝑥
≤ 13.2.4.24048
foxitpdf_editor
14.0.0.33046 ≤
𝑥
≤ 14.0.4.33508
foxitpdf_editor
2023.1.0.15510 ≤
𝑥
≤ 2023.3.0.23028
foxitpdf_editor
2024.1.0.23997 ≤
𝑥
≤ 2024.4.1.27687
foxitpdf_editor
2025.1.0.27937 ≤
𝑥
≤ 2025.3.0.35737
foxitpdf_editor
2026.1.0.36452 ≤
𝑥
≤ 2026.1.1.36485
foxitpdf_reader
𝑥
≤ 2026.1.1.36485
foxitpdf_editor
𝑥
≤ 13.2.3.63444
foxitpdf_editor
14.0.0.68868 ≤
𝑥
≤ 14.0.3.69295
foxitpdf_editor
2023.1.0.55583 ≤
𝑥
≤ 2023.3.0.63083
foxitpdf_editor
2024.1.0.63682 ≤
𝑥
≤ 2024.4.1.66479
foxitpdf_editor
2025.1.0.66692 ≤
𝑥
≤ 2025.3.0.69570
foxitpdf_editor
2026.1.0.70169 ≤
𝑥
≤ 2026.1.1.70276
foxitpdf_reader
𝑥
≤ 2026.1.1.70276
𝑥
= Vulnerable software versions