Vulnerabilities

Embedding JavaScript within a PDF file will cause the page to be deleted.

Embedding JavaScript within a PDF file will cause the page to be deleted. Subsequent scripts will continue to access the relevant properties of the document view, eventually leading to the crash of the application.

Read at NIST National Vulnerability Database (CVE API 2.0)

Vendor

Oracle

Product

java

CVSS

7.8

• NIST National Vulnerability Database (CVE API 2.0) (nvd.nist.gov)
• CVE-2026-13128 on this site · NVD · CVE.org · Vulnpedia

Other items that share a CVE or were clustered with this one.

1. 21
   ZDI advisory ZDI 23 Sep 2026

   Foxit PDF Reader Annotation Use-After-Free Remote Code Execution Vulnerability

   CVSS 7.8 CVE-2026-13128 Foxit / Nitro / PDF-XChange
2. 21
   ZDI advisory ZDI 24 Aug 2026

   Foxit PDF Reader Doc Object Use-After-Free Remote Code Execution Vulnerability

   CVSS 7.8 CVE-2026-13128 Foxit / Nitro / PDF-XChange