[CVE-2026-12057] When the application executes the JavaScript script embedded in the PDF within the sandbox, it fails…

Descripción técnica

When the application executes the JavaScript script embedded in the PDF within the sandbox, it fails to intercept some dangerous interfaces, which allows remote scripts to be loaded, resulting in arbitrary code execution.

Puntuación CVSS

Score: 8.6/10 — Severidad: HIGH — Estado NIST: Analyzed

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

Productos afectados

Ai — Foxit

Debilidades (CWE)

CWE-829

Fuente oficial

Publicado en NIST NVD.