CVE record · 2 sources
CVE-2026-13126
CVSS 7.8The embedded JavaScript in the PDF deleted the pages, making the object invalid.
- Vendor
- Oracle
- Product
- java
- CVSS
- 7.8
- Exposure class
- Endpoint security
Coverage
2Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.
-
Foxit PDF Reader Annotation Use-After-Free Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open…
-
The embedded JavaScript in the PDF deleted the pages, making the object invalid.
The embedded JavaScript in the PDF deleted the pages, making the object invalid. The application attempted to perform a write operation on the invalid pop-up annotations, resulting in the program crashing.