CVE-2026-12057 — DoS + Remote Code Execution via PDF JavaScript in Foxit AI

CVE-2026-12057

DoS + Remote Code Execution via PDF JavaScript in Foxit AI PUBLISHED

Description (CNA)

When the application executes the JavaScript script embedded in the PDF within the sandbox, it fails to intercept some dangerous interfaces, which allows remote scripts to be loaded, resulting in arbitrary code execution.

Affected (CNA)

Vendor / product	Versions
Foxit Software Inc. / Foxit AI	affected before 2026-06-15

CWE

CWE-829

References

https://www.foxit.com/support/security-bulletins.html

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.