CVE Explorer
CVE-2026-12057
When the application executes the JavaScript script embedded in the PDF within the sandbox, it fails to intercept some dangerous interfaces, which allows remote scripts to be loaded, resulting in arbitrary code execution.
Known exploited
Not asserted
Disputed
No
Stale source
No
Conflicts
0
Affected products and versions
1 source assertion{"defaultStatus":"unaffected","product":"Foxit AI","vendor":"Foxit Software Inc.","versions":[{"status":"affected","version":"before 2026-06-15"}]}
- cve_program_cvelist_v5affectedurn:baitaphish:normalized-source-record:v2:575a3059f5526f6f1a7fbfb083a66719ca8c3f69dc8a2fa1d85e4cb29a8fa5e4 · sha256:ee934337e08233c0… · /containers/cna/affected/0
Provider-owned CVSS observations
1 source assertion{"metric":{"attackComplexity":"LOW","attackVector":"LOCAL","availabilityImpact":"HIGH","baseScore":8.6,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"CHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","version":"3.1"},"metric_type":"cvssV3_1"}
- cve_program_cvelist_v5cvssurn:baitaphish:normalized-source-record:v2:575a3059f5526f6f1a7fbfb083a66719ca8c3f69dc8a2fa1d85e4cb29a8fa5e4 · sha256:ee934337e08233c0… · /containers/cna/metrics/0/cvssV3_1
CWE assertions
1 source assertion{"cweId":"CWE-829","description":"CWE-829 Inclusion of functionality from untrusted control sphere","lang":"en","type":"CWE"}
- cve_program_cvelist_v5cweurn:baitaphish:normalized-source-record:v2:575a3059f5526f6f1a7fbfb083a66719ca8c3f69dc8a2fa1d85e4cb29a8fa5e4 · sha256:ee934337e08233c0… · /containers/cna/problemTypes/0/descriptions/0
Source references
1 source assertion{"url":"https://www.foxit.com/support/security-bulletins.html"}
- cve_program_cvelist_v5referenceurn:baitaphish:normalized-source-record:v2:575a3059f5526f6f1a7fbfb083a66719ca8c3f69dc8a2fa1d85e4cb29a8fa5e4 · sha256:ee934337e08233c0… · /containers/cna/references/0
Attribution and limitations
- CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →
Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.