CVE detail
CVE-2026-57256
When the application opens a PDF and executes JavaScript, it performs abnormal operations on the list box field, and this operation is repeated after the form is reset. During this process, the application failed to adequately verify the validity of the form objects and their internal dictionary pointers, resulting in accessing internal members of invalid or improperly initialized fields. This led to an illegal pointer read, ultimately causing the application to crash.
Buzz score
Why this CVE is surfacing
This all-time snapshot uses the same composite formula as Trending across a 30-year evidence window, rather than a current rolling window.
Buzz score components · mention 13.9 · diversity 15.0 · KEV 0.0 · OTX 0.0 · PoC 0.0
Why it matters now
Mention timeline
- Total mentions
- 3
- within the 30d window
- Peak daily
- 3
- highest bucket
Evidence
Source links by recency
3 source links · newest first
TALOS-2026-2420 CVE-2026-57256 A code execution vulnerability exists in the Javascript checkbox CBF\_Widget functionality of Foxit Reader (version(s): 2026.1.1.36485). A specially crafted malformed file can lead to remote code execution. An attacker
newstalosintelligence.comJul 8, 2026, 11:59 PM- https://www.talosintelligence.com/vulnerability_reports/TALOS-2026-2420www.talosintelligence.com
No excerpt available.
Exploitwww.talosintelligence.comJul 8, 2026, 9:16 AM No excerpt available.
Vendor Advisorywww.foxit.comJul 8, 2026, 9:16 AM
Exploit code
Public exploit repository references
Public PoC repositories are third-party, potentially unsafe artifacts. Treat their code as untrusted and use it only on authorized systems in an isolated, least-privilege environment. cvebuzz does not execute the code or verify that an exploit works.
0 repository references · best confidence N/A · max 0 stars
Related records
Similar CVEs
6 related CVEs with shared weakness or product evidence
- CVE-2026-57250CVSS 7.8 · High
When the application opens a PDF and JavaScript resets the form fields, the script re-enters the interface. The underlying native object is damaged, but the application does not p…
- CVE-2026-57247CVSS 7.8 · High
The application re-enters the document structure via field processing and deletes the current page, and then continues using the field objects obtained before deletion, triggering…
- CVE-2026-57244CVSS 7.8 · High
After JavaScript resetting the form, the synchronization process lacks re-entry protection and object lifecycle verification, resulting in the failure of the control pointer durin…
- CVE-2026-57237CVSS 7.8 · High
When the application opens a PDF and JavaScript modifies the properties of form fields, it causes the state of the underlying objects referenced by the program to become invalid.…
- CVE-2026-3779CVSS 7.8 · High
The application's list box calculate array logic keeps stale references to page or form objects after they are deleted or re-created, which allows crafted documents to trigger a u…
- CVE-2026-3777CVSS 5.5 · Medium
The application does not properly validate the lifetime and validity of internal view cache pointers after JavaScript changes the document zoom and page state. When a script modif…