[CVE-2026-57242] The application opens the PDF, and JavaScript modifies the form. However, the related objects on the…

Descripción técnica

The application opens the PDF, and JavaScript modifies the form. However, the related objects on the page lack complete lifecycle management and null value validation; when the page state changes, the application continuously dereferences invalid objects, eventually leading to a crash.

Puntuación CVSS

Score: 7.8/10 — Severidad: HIGH — Estado NIST: Analyzed

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Productos afectados

Pdf editor, Pdf reader, Windows — Foxit, Microsoft

Debilidades (CWE)

CWE-416

Fuente oficial

Publicado en NIST NVD.