CVE-2026-57237: Foxit PDF Editor/Reader Annotation Use-After-Free Remote Code Execution Vulnerability

Q: What is the severity of CVE-2026-57237?

CVE-2026-57237 has a severity rating of 7.8, classified as high.

Q: What is CVE-2026-57237?

CVE-2026-57237 is a use-after-free vulnerability in Foxit PDF Editor and Reader that can lead to remote code execution.

Q: How do I fix CVE-2026-57237?

To fix CVE-2026-57237, users should update to the latest version of Foxit PDF Editor or Reader that addresses this vulnerability.

Q: What applications are affected by CVE-2026-57237?

CVE-2026-57237 affects Foxit PDF Editor and Foxit PDF Reader.

Q: What type of attack does CVE-2026-57237 enable?

CVE-2026-57237 enables a remote code execution attack when a specially crafted PDF with JavaScript is opened.

Published Jul 8, 2026

Updated

When the application opens a PDF and JavaScript modifies the properties of form fields, it causes the state of the underlying objects referenced by the program to become invalid. Eventually, it reads an illegal memory address, which leads to the crash of the application.

Affected Software

17 affected components

Foxit Foxit PDF Editor/Reader

All of the following

Any of the following

Foxit PDF Editor<=13.2.4.24048

Foxit PDF Editor>=14.0.0.33046<=14.0.4.33508

Foxit PDF Editor>=2023.1.0.15510<=2023.3.0.23028

Foxit PDF Editor>=2024.1.0.23997<=2024.4.1.27687

Foxit PDF Editor>=2025.1.0.27937<=2025.3.0.35737

Foxit PDF Editor>=2026.1.0.36452<=2026.1.1.36485

Foxit PDF Reader<=2026.1.1.36485

Microsoft Windows

All of the following

Any of the following

Foxit PDF Editor<=13.2.3.63444

Foxit PDF Editor>=14.0.0.33046<=14.0.3.69295

Foxit PDF Editor>=2023.1.0.15510<=2023.3.0.63083

Foxit PDF Editor>=2024.1.0.23997<=2024.4.1.66479

Foxit PDF Editor>=2025.1.0.27937<=2025.3.0.69570

Foxit PDF Editor>=2026.1.0.36452<=2026.1.1.70276

Foxit PDF Reader<=2026.1.1.70276

Apple macOS

Event History

Jul 8, 2026

CVE Published

via MITRE·07:36 AM

Data Sourced

via MITRE·07:36 AM

DescriptionSeverityWeakness

Data Sourced

via NVD·09:16 AM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2026-57237?

CVE-2026-57237 has a severity rating of 7.8, classified as high.

What is CVE-2026-57237?

CVE-2026-57237 is a use-after-free vulnerability in Foxit PDF Editor and Reader that can lead to remote code execution.

How do I fix CVE-2026-57237?

To fix CVE-2026-57237, users should update to the latest version of Foxit PDF Editor or Reader that addresses this vulnerability.

What applications are affected by CVE-2026-57237?

CVE-2026-57237 affects Foxit PDF Editor and Foxit PDF Reader.

What type of attack does CVE-2026-57237 enable?