Vulnerabilities

The application opens the PDF, and JavaScript modifies the form.

The application opens the PDF, and JavaScript modifies the form. However, the related objects on the page lack complete lifecycle management and null value validation; when the page state changes, the application continuously dereferences invalid objects, eventually leading to a crash.

Read at NIST National Vulnerability Database (CVE API 2.0)

Vendor

Oracle

Product

java

CVSS

7.8

• NIST National Vulnerability Database (CVE API 2.0) (nvd.nist.gov)
• CVE-2026-57242 on this site · NVD · CVE.org · Vulnpedia

Other items that share a CVE or were clustered with this one.

1. 21
   ZDI advisory ZDI 24 Aug 2026

   Foxit PDF Reader AcroForm Use-After-Free Remote Code Execution Vulnerability

   CVSS 7.8 CVE-2026-57242 Foxit / Nitro / PDF-XChange
2. 10
   CVE NVD 8 Jul 2026

   When the application opens a PDF and JavaScript resets the form fields, the script re-enters the interface.

   CVSS 7.8 CVE-2026-57250 Oracle
3. 10
   CVE NVD 8 Jul 2026

   When the application opens a PDF and JavaScript modifies the properties of form fields, it causes the state of the underlying objects referenced by…

   CVSS 7.8 CVE-2026-57237 Oracle