CVE-2026-12057 | BDVDB-2026-340237 Detail
Foxit SoftwareFoxit AI
Description#
When the application executes the JavaScript script embedded in the PDF within the sandbox, it fails to intercept some dangerous interfaces, which allows remote scripts to be loaded, resulting in arbitrary code execution.
Impact#
CAPEC-175 Code Inclusion
Weaknesses#
- CWE-829 Inclusion of functionality from untrusted control sphere
References#
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.