---
cve: "CVE-2026-57237"
severity: "HIGH"
cvss: 7.8
epss: "0.2%"
vendor: "Foxit Software Inc."
kev: false
exploited: false
published: "2026-07-08 07:36:06"
tags: [cve, security, high]
source: tsecurity.de CVE-Dossier
exported: "2026-09-21T09:23:05+02:00"
---

# CVE-2026-57237

> 7.8 HIGH

## Beschreibung

When the application opens a PDF and JavaScript modifies the properties of form fields, it causes the state of the underlying objects referenced by the program to become invalid. Eventually, it reads an illegal memory address, which leads to the crash of the application.

## CVSS-Vektor

```
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
```

| Metrik | Wert | Bewertung |
|---|---|---|
| AV Angriffsvektor | Lokal | good |
| AC Komplexität | Gering | bad |
| PR Privilegien | Keine | bad |
| UI Interaktion | Erforderlich | good |
| S Scope | Unverändert | good |
| C Vertraulichkeit | Hoch | bad |
| I Integrität | Hoch | bad |
| A Verfügbarkeit | Hoch | bad |

## Referenzen

- <https://www.foxit.com/support/security-bulletins.html>

---
_Exportiert aus dem [tsecurity.de CVE-Dossier](https://tsecurity.de/cve?cve=CVE-2026-57237) · Datenquellen: EUVD (ENISA), NVD, OSV, CISA KEV, FIRST EPSS, Exploit-DB, BSI BITS_