Unrated severityNVD Advisory· Published Jul 8, 2026· Updated Jul 8, 2026
Foxit PDF Editor/Reader Annotation Use-After-Free Remote Code Execution Vulnerability
CVE-2026-13126
Description
The embedded JavaScript in the PDF deleted the pages, making the object invalid. The application attempted to perform a write operation on the invalid pop-up annotations, resulting in the program crashing.
Affected products
1Patches
Vulnerability mechanics
References
1News mentions
0No linked articles in our index yet.