NetSight
high7.8

CVE-2026-57242

The application opens the PDF, and JavaScript modifies the form.

Impact

The application opens the PDF, and JavaScript modifies the form. However, the related objects on the page lack complete lifecycle management and null value validation; when the page state changes, the application continuously dereferences invalid objects, eventually leading to a crash.

Affected products

VendorProductAffected versions
FoxitPdf Editor
through 13.2.4.24048
from 14.0.0.33046 through 14.0.4.33508
from 2023.1.0.15510 through 2023.3.0.23028
from 2024.1.0.23997 through 2024.4.1.27687
from 2025.1.0.27937 through 2025.3.0.35737
from 2026.1.0.36452 through 2026.1.1.36485
FoxitPdf Reader
through 2026.1.1.36485

Weakness classification

References