Live · 98 sources · updated 13m ago
The Security Standard

A daily wire for defenders: vulnerabilities, advisories, research, standards.

CVE record · 2 sources

CVE-2026-13128

CVSS 7.8

Embedding JavaScript within a PDF file will cause the page to be deleted.

Vendor
Oracle
Product
java
CVSS
7.8
Exposure class
Endpoint security

Coverage

3

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

  1. ZDI advisory ZDI

    Foxit PDF Reader Annotation Use-After-Free Remote Code Execution Vulnerability

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open…

  2. ZDI advisory ZDI

    Foxit PDF Reader Doc Object Use-After-Free Remote Code Execution Vulnerability

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open…

  3. CVE NVD

    Embedding JavaScript within a PDF file will cause the page to be deleted.

    Embedding JavaScript within a PDF file will cause the page to be deleted. Subsequent scripts will continue to access the relevant properties of the document view, eventually leading to the crash of the application.

Keyboard

j / k
Next / previous item
o or Enter
Open the original source
i
Open the item page
s
Save or unsave for later
/
Focus search
g then f v a r n s
Go to front, vulnerabilities, advisories, research, news, standards
t
Toggle theme
?
This help