Where
AND
-Infinity
0
Severity
7.8
EPSS
0.01%
Use After Free
AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Calling a function that triggers a UI refresh after removing comments via a script may access an invalidated object, leading to program crashes.

First published (updated )
Severity
7.8
EPSS
0.03%
Input Validation
AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Parsing logic flaws cause non-signature data to be misidentified as valid signatures when processing malformed form field hierarchies, leading to invalid memory writes and program crashes during internal data structure construction.

First published (updated )
Severity
7.8
EPSS
0.01%
Use After Free
AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Document structural anomalies caused inconsistencies between page element relationships and internal index states. When scripts triggered document modifications, object reference validity was not properly maintained, leading to a crash when accessing an invalid pointer during page information queries.

First published (updated )
Severity
5.5
EPSS
0.01%
AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Insufficient parameter verification leads to the occurrence of format errors in files, which will trigger an unhandled "std::invalidargument" exception, ultimately causing the program to terminate.

First published (updated )
Severity
5.5
EPSS
0.02%
AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Improper control flow management allows a crafted document action chain to cause modal dialog reentry on the main thread, resulting in UI freeze and denial of service.

First published (updated )
Severity
5.5
EPSS
0.01%
Use After Free
AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Flaws in page lifecycle management allow document structure changes to desynchronize internal component states, causing subsequent operations to access invalidated objects and crash the program.

First published (updated )
Severity
5.5
EPSS
0.02%
Use After Free
AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

A crafted XFA PDF can trigger a use-after-free condition during calculate event processing, causing the application to crash and resulting in an arbitrary code execution.

First published (updated )

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203