[CVE-2026-13126] The embedded JavaScript in the PDF deleted the pages, making the object invalid. The application att…

Descripción técnica

The embedded JavaScript in the PDF deleted the pages, making the object invalid. The application attempted to perform a write operation on the invalid pop-up annotations, resulting in the program crashing.

Puntuación CVSS

Score: 7.8/10 — Severidad: HIGH — Estado NIST: Analyzed

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Productos afectados

Pdf editor, Pdf reader, Windows — Foxit, Microsoft

Debilidades (CWE)

CWE-416

Fuente oficial

Publicado en NIST NVD.