cvedb.io
CVE-2026-12057
HIGH · CVSS 8.6
EPSS exploitation probability: 0%
Published 2026-06-15T12:16:23.050 · Last modified 2026-06-17T10:14:36.600

Summary

When the application executes the JavaScript script embedded in the PDF within the sandbox, it fails to intercept some dangerous interfaces, which allows remote scripts to be loaded, resulting in arbitrary code execution.

Affected products

foxit — ai

Does this affect you?

Add your gear to cvedb and we'll alert you only when foxit ships something exploited.

Check my exposure →

References

This product uses data from the NVD API but is not endorsed or certified by the NVD. Informational only; not professional security advice.