AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

FoxitCVE-2026-57247

Foxit PDF: use after free

Foxit

CVE-2026-57247 · Published Jul 8, 2026 · updated Jul 9, 2026

High7.8
No fix yet
Foxit advisory

The application re-enters the document structure via field processing and deletes the current page, and then continues using the field objects obtained before deletion, triggering an illegal read and crashing.

Affected versions

PackageAffectedFixed in
Foxit PDF Editor
Product
<= Versions 2026.1.1 and earlierNo fix yet
<= Versions 14.0.4 and earlierNo fix yet
<= Versions 13.2.4 and earlierNo fix yet
<= Versions 2026.1.1 and earlierNo fix yet
<= Versions 14.0.3 and earlierNo fix yet
Foxit PDF Reader
Product
<= Versions 2026.1.1 and earlierNo fix yet
Details and references
CVSS 3.1
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Severity from
the vendor (its own CVE record or advisory)
Weakness
CWE-416

More Foxit advisories

All Foxit
Medium 6.1Jul 8Foxit PDF: out-of-bounds readCVE-2026-57258no fix yetMedium 6.5Jul 8Foxit PDF: XML external entityCVE-2026-57259no fix yetHigh 7.8Jul 8Foxit PDF: out-of-bounds writeCVE-2026-57260no fix yetHigh 7.8Jul 8Foxit PDF: use after freeCVE-2026-57250no fix yetHigh 7.8Jul 8Foxit PDF: improper array index validationCVE-2026-57251no fix yetHigh 7.8Jul 8Foxit PDF: use after freeCVE-2026-57252no fix yet