CVE-2026-12057: DoS + Remote Code Execution via PDF JavaScript in Foxit AI
When the application executes the JavaScript script embedded in the PDF within the sandbox, it fails to intercept some dangerous interfaces, which allows remote scripts to be loaded, resulting in arbitrary code execution.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Remove
Remove
Foxit AIfrom your environment.Uninstall or remove Foxit AI from systems where it is not required until a vendor-provided patch or update addressing this issue is available.
- Configuration
Disable execution of JavaScript embedded within PDFs in Foxit AI settings or preferences to prevent execution of embedded or remotely loaded scripts.
Foxit AI JavaScript execution in PDFs = disabled - Compensating control
Block or restrict Foxit AI from making outbound network connections (for example via host firewall, proxy or network ACLs) to prevent loading of remote scripts from PDFs.
Event History
Frequently Asked Questions
What is the severity of CVE-2026-12057?
The severity of CVE-2026-12057 is classified as high with a score of 8.6.
How do I fix CVE-2026-12057?
To mitigate CVE-2026-12057, update to the latest version of Foxit AI that addresses this vulnerability.
What types of vulnerabilities does CVE-2026-12057 exploit?
CVE-2026-12057 exploits flaws in the handling of JavaScript embedded in PDFs, allowing for remote code execution.
What are the potential impacts of CVE-2026-12057?
The potential impacts of CVE-2026-12057 include denial of service and arbitrary code execution on affected systems.
Who is affected by CVE-2026-12057?
Users of Foxit AI are affected by CVE-2026-12057, particularly those who open PDF files containing malicious JavaScript.