115567 matches found
CVE-2026-57244: Use After Free
After JavaScript resetting the form, the synchronization process lacks re-entry protection and object lifecycle verification, resulting in the failure of the control pointer during the traversal process. After the pointer fails, it still continues to dereference, causing the application to crash...
CVE-2026-57243: Out-of-bounds Read
During the process of page opening and form formatting, a JavaScript reentrancy results in an inconsistent document status. Subsequently, with outdated page information, the application attempts to access invalid addresses, causing the application to crash...
CVE-2026-57240: Use After Free
When the application opens a PDF file and JavaScript deletes the PDF fields, the subsequent logic still uses the old field pointers, resulting in invalid pointer references and causing the application to crash...
PT-2026-56336
Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description Opening a PDF allows JavaScript to modify form field properties, causing the state of the underlying objects referenced by the program to become invalid. This...
PT-2026-56346
The application re-enters the document structure via field processing and deletes the current page, and then continues using the field objects obtained before deletion, triggering an illegal read and crashing...
PT-2026-56345
When dealing with abnormally constructed objects, there is a lack of argument validation; JavaScript triggers signature verification, but the signature plugin does not perform validation when copying the abnormal string, causing the application to crash...
PT-2026-56349
When the application opens a PDF and JavaScript resets the form fields, the script re-enters the interface. The underlying native object is damaged, but the application does not perform validation. The function call on the damaged object leads to the application crashing...
PT-2026-56348
Name of the Vulnerable Software and Affected Versions Foxit PDF Editor/Reader affected versions not specified Description An issue occurs when the application opens a PDF file and a script resets the annotation status, followed by an additional action that triggers the reset form event. During th...
PT-2026-56351
Name of the Vulnerable Software and Affected Versions Foxit PDF Editor/Reader affected versions not specified Description A use-after-free issue occurs when the application opens a PDF file. During the process where JavaScript deletes pages and removes attachment annotations, the attachment panel...
PT-2026-56353
Name of the Vulnerable Software and Affected Versions Foxit PDF Editor/Reader affected versions not specified Description An issue exists where the application fails to perform proper type checking when parsing a PDF containing an abnormal annotation referenced by other objects. This type confusi...
PT-2026-56507
Name of the Vulnerable Software and Affected Versions Hono versions 4.3.3 through 4.12.26 Description The AWS API Gateway v1 adapter incorrectly de-duplicates repeated request header values by using a substring comparison instead of an exact match. This behavior can lead to the loss of distinct...
PT-2026-56339
Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description A crash occurs when the application opens a PDF file and JavaScript deletes PDF fields. The subsequent logic continues to use old field pointers, leading to...
CVE-2026-52200
An issue in Generic OEM UZ801v2.1 4G LTE Router V3.4.3 allows a remote attacker to execute arbitrary code via the /ajax web management API endpoint in MifiService.apk...
PT-2026-56333
Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description When opening a PDF file, JavaScript uses a damaged field tree to trigger field traversal. This causes the program to hold an invalid form object when accessing t...
BeyondTrust Remote Support (RS) < 25.3.3 Multiple Vulnerabilities (BT26-03)
The version of BeyondTrust Remote Support RS running on the remote host is prior to 25.3.3. It is, therefore, affected by multiple vulnerabilities, including: - A critical pre-authentication vulnerability in the authentication subsystem. Improper validation of authentication data may allow a...
PT-2026-56356
Name of the Vulnerable Software and Affected Versions Foxit PDF Editor/Reader affected versions not specified Description During the PRC parsing stage, a lack of boundary verification for the PRC entity index allows an out-of-bounds read of the entity array, causing the application to crash...
IBM WebSphere Application Server 8.5.x < 8.5.5.30 / 9.x < 9.0.5.29 XSRF (7279256)
The version of IBM WebSphere Application Server running on the remote host is affected by a vulnerability as referenced in the 7279256 advisory. - IBM WebSphere Application Server is affected by a cross-site request forgery, caused by improper validation of user-supplied input to the Administrati...
PT-2026-56331
Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description The application crashes when opening a PDF file containing JavaScript that rewrites the document to modify the page structure. This process invalidates page...
PT-2026-56337
Name of the Vulnerable Software and Affected Versions The product name cannot be determined. affected versions not specified Description A crash occurs when the application opens a PDF and JavaScript deletes a form field object, followed by an attempt to access that invalid object. Recommendation...
