Vulnerabilities

When the application opens a PDF and JavaScript modifies the properties of form fields, it causes the state of the underlying objects referenced by…

When the application opens a PDF and JavaScript modifies the properties of form fields, it causes the state of the underlying objects referenced by the program to become invalid. Eventually, it reads an illegal memory address, which leads to the crash of the application.

Read at NIST National Vulnerability Database (CVE API 2.0)

Vendor

Oracle

Product

java

CVSS

7.8

• NIST National Vulnerability Database (CVE API 2.0) (nvd.nist.gov)
• CVE-2026-57237 on this site · NVD · CVE.org · Vulnpedia

Other items that share a CVE or were clustered with this one.

1. 11
   ZDI advisory ZDI 24 Aug 2026

   Foxit PDF Reader Annotation Use-After-Free Information Disclosure Vulnerability

   CVSS 3.3 CVE-2026-57237 Foxit / Nitro / PDF-XChange
2. 10
   CVE NVD 8 Jul 2026

   When the application opens a PDF and JavaScript resets the form fields, the script re-enters the interface.

   CVSS 7.8 CVE-2026-57250 Oracle
3. 10
   CVE NVD 8 Jul 2026

   The application opens the PDF, and JavaScript modifies the form.

   CVSS 7.8 CVE-2026-57242 Oracle