NetSight
high7.8

CVE-2026-57238

After the application opened the PDF, JavaScript deleted the form field object.

Impact

After the application opened the PDF, JavaScript deleted the form field object. Subsequently, it attempted to access the invalid object, which caused the application to crash.

Affected products

VendorProductAffected versions
FoxitPdf Editor
through 13.2.4.24048
from 14.0.0.33046 through 14.0.4.33508
from 2023.1.0.15510 through 2023.3.0.23028
from 2024.1.0.23997 through 2024.4.1.27687
from 2025.1.0.27937 through 2025.3.0.35737
from 2026.1.0.36452 through 2026.1.1.36485
FoxitPdf Reader
through 2026.1.1.36485

Weakness classification

References