LIVE · cybersecurity feed
Live wire
cve recordhigh

CVE-2026-13128

foxit · pdf editor

Published
CVSS7.8
Severityhigh
WeaknessCWE-416
ExploitedNot in CISA KEV

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Description

Embedding JavaScript within a PDF file will cause the page to be deleted. Subsequent scripts will continue to access the relevant properties of the document view, eventually leading to the crash of the application.

References

← Back to the CVE Tracker

Our coverage of CVE-2026-13128

No stories yet. This page updates automatically when we publish reporting that references CVE-2026-13128.