Quick answers
- Is CVE-2026-12057 exploited in the wild?
- No. Junglewise Threat Intelligence has no report of CVE-2026-12057 being exploited in the wild.
- How severe is CVE-2026-12057?
- High severity, with a CVSS score of 8.6, published 15 June 2026.
- Which products and versions are affected?
- Foxit PDF Editor; Foxit PDF Reader.
- Is there a fix for CVE-2026-12057?
- No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
- How is CVE-2026-12057 attacked?
- It is attacked with local access, in a network appliance.
- Am I affected by CVE-2026-12057?
- Check whether you run Foxit PDF Editor or Foxit PDF Reader. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.
Technical details
A vulnerability exists in Foxit PDF Editor and Reader due to the improper restriction of dangerous interfaces within the JavaScript sandbox (CWE-829). When the application executes embedded JavaScript, it fails to block certain sensitive APIs, which can be leveraged to load remote scripts. An attacker can exploit this by convincing a user to open a malicious PDF file (User Interaction required). Successful exploitation allows the attacker to escape the sandbox and achieve arbitrary code execution with the privileges of the current user. The CVSS score of 8.6 reflects a high impact on confidentiality, integrity, and availability with a scope change.
Affected products
- Foxit PDF Editor
- Foxit PDF Reader
Timeline
- 2026-06-15: disclosed
- 2026-06-15: advisory