Unrated severityNVD Advisory· Published Jul 8, 2026· Updated Jul 8, 2026
Foxit PDF Editor/Reader Doc Object Use-After-Free Remote Code Execution Vulnerability
CVE-2026-13128
Description
Embedding JavaScript within a PDF file will cause the page to be deleted. Subsequent scripts will continue to access the relevant properties of the document view, eventually leading to the crash of the application.
Affected products
1Patches
Vulnerability mechanics
References
1News mentions
0No linked articles in our index yet.