[CVE-2026-57250] When the application opens a PDF and JavaScript resets the form fields, the script re-enters the int…

Descripción técnica

When the application opens a PDF and JavaScript resets the form fields, the script re-enters the interface. The underlying native object is damaged, but the application does not perform validation. The function call on the damaged object leads to the application crashing.

Puntuación CVSS

Score: 7.8/10 — Severidad: HIGH — Estado NIST: Analyzed

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Productos afectados

Pdf editor, Pdf reader, Windows, Macos — Foxit, Microsoft, Apple

Debilidades (CWE)

CWE-416

Fuente oficial

Publicado en NIST NVD.