CVEvulnerability

CVE-2026-12057

7.8 HIGH Published 2026-06-15 Modified 2026-10-25 Official page ↗
Status
Analyzed
Published
2026-06-15
Last modified
2026-10-25
Assigner
14984358-7092-470d-8f34-ade47a7658a2
CVSS 3.1 (14984358-7092-470d-8f34-ade47a7658a2)
8.6 HIGH — CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
CVSS 3.1 ([email protected])
7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Weaknesses
CWE-829

Description

When the application executes the JavaScript script embedded in the PDF within the sandbox, it fails to intercept some dangerous interfaces, which allows remote scripts to be loaded, resulting in arbitrary code execution.

Affected configurations

• foxit ai (< 2026-06-15)

Related

Weakness · CWE (1)

  • CWE-829 Inclusion of Functionality from Untrusted Control Sphere weakness

References