[CVE-2026-13127] The application opens the PDF file. JavaScript then rewrites the document to modify the page structu…

Descripción técnica

The application opens the PDF file. JavaScript then rewrites the document to modify the page structure, resulting in the invalidation of the page objects. However, the thumbnails still use the invalid page objects, ultimately causing the application to crash.

Puntuación CVSS

Score: 7.8/10 — Severidad: HIGH — Estado NIST: Analyzed

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Productos afectados

Pdf editor, Pdf reader, Windows — Foxit, Microsoft

Debilidades (CWE)

CWE-416

Fuente oficial

Publicado en NIST NVD.