Skip to content
CVE PROGRAM SOURCE RECORD8.6 High

CVE-2026-12057

DoS + Remote Code Execution via PDF JavaScript in Foxit AI

Description

When the application executes the JavaScript script embedded in the PDF within the sandbox, it fails to intercept some dangerous interfaces, which allows remote scripts to be loaded, resulting in arbitrary code execution.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Foxit Software Inc. Foxit AI

Default version status: unaffected

  • before 2026-06-15affected

References