VYPR
Unrated severityNVD Advisory· Published Jul 8, 2026· Updated Jul 8, 2026

Foxit PDF Editor/Reader Annotation Use-After-Free Remote Code Execution Vulnerability

CVE-2026-13127

Description

The application opens the PDF file. JavaScript then rewrites the document to modify the page structure, resulting in the invalidation of the page objects. However, the thumbnails still use the invalid page objects, ultimately causing the application to crash.

Affected products

1

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.