| CVE-2026-12057 | 8.6 | — | — | — | foxit / ai | When the application executes the JavaScript script embedded in the PDF within the sandbox, it fails to intercept | 118d ago |
| CVE-2026-57239 | 8.2 | — | — | — | foxit / pdf editor | The user-controllable executable files will be directly executed by high-privilege processes, allowing low-privile | 95d ago |
| CVE-2026-57260 | 7.8 | — | — | — | foxit / pdf editor | The application opened a PDF file containing an abnormal Unity 3D object. | 95d ago |
| CVE-2026-57256 | 7.8 | — | — | — | foxit / pdf editor | When the application opens a PDF and executes JavaScript, it performs abnormal operations on the list box field, a | 95d ago |
| CVE-2026-57254 | 7.8 | — | — | — | foxit / pdf editor | There is an abnormal annotation within the PDF that is referenced by other objects. | 95d ago |
| CVE-2026-57252 | 7.8 | — | — | — | foxit / pdf editor | When the application opens a PDF file, during the process of JavaScript deleting pages and removing attachment ann | 95d ago |
| CVE-2026-57251 | 7.8 | — | — | — | foxit / pdf editor | The application opens a PDF, but the cloud-like appearance of the construction process lacks proper setting of an | 95d ago |
| CVE-2026-57250 | 7.8 | — | — | — | foxit / pdf editor | When the application opens a PDF and JavaScript resets the form fields, the script re-enters the interface. | 95d ago |
| CVE-2026-57249 | 7.8 | — | — | — | foxit / pdf editor | After the application opened the PDF file, the script first reset the annotation status, then triggered the reset | 95d ago |
| CVE-2026-57248 | 7.8 | — | — | — | foxit / pdf editor | When the application opens a PDF file and JavaScript writes annotation attributes, there is a lack of sufficient o | 95d ago |
| CVE-2026-57247 | 7.8 | — | — | — | foxit / pdf editor | The application re-enters the document structure via field processing and deletes the current page, and then conti | 95d ago |
| CVE-2026-57246 | 7.8 | — | — | — | foxit / pdf editor | When dealing with abnormally constructed objects, there is a lack of argument validation; JavaScript triggers sign | 95d ago |
| CVE-2026-57245 | 7.8 | — | — | — | foxit / pdf editor | When the application opens a PDF, traverses and builds the annotation elements related to hyperlinks, it fails to | 95d ago |
| CVE-2026-57244 | 7.8 | — | — | — | foxit / pdf editor | After JavaScript resetting the form, the synchronization process lacks re-entry protection and object lifecycle ve | 95d ago |
| CVE-2026-57242 | 7.8 | — | — | — | foxit / pdf editor | The application opens the PDF, and JavaScript modifies the form. | 95d ago |
| CVE-2026-57240 | 7.8 | — | — | — | foxit / pdf editor | When the application opens a PDF file and JavaScript deletes the PDF fields, the subsequent logic still uses the o | 95d ago |
| CVE-2026-57238 | 7.8 | — | — | — | foxit / pdf editor | After the application opened the PDF, JavaScript deleted the form field object. | 95d ago |
| CVE-2026-57237 | 7.8 | — | — | — | foxit / pdf editor | When the application opens a PDF and JavaScript modifies the properties of form fields, it causes the state of the | 95d ago |
| CVE-2026-13129 | 7.8 | — | — | — | foxit / pdf editor | When the application opens a PDF file, JavaScript uses the damaged field tree to trigger field traversal, resultin | 95d ago |
| CVE-2026-13128 | 7.8 | — | — | — | foxit / pdf editor | Embedding JavaScript within a PDF file will cause the page to be deleted. | 95d ago |
| CVE-2026-13127 | 7.8 | — | — | — | foxit / pdf editor | The application opens the PDF file. | 95d ago |
| CVE-2026-13126 | 7.8 | — | — | — | foxit / pdf editor | The embedded JavaScript in the PDF deleted the pages, making the object invalid. | 95d ago |
