CVE-2026-13127: Foxit PDF Editor/Reader Annotation Use-After-Free Remote Code Execution Vulnerability
Published Jul 8, 2026
·Updated
The application opens the PDF file. JavaScript then rewrites the document to modify the page structure, resulting in the invalidation of the page objects. However, the thumbnails still use the invalid page objects, ultimately causing the application to crash.
Affected Software
9 affected components
Foxit PDF Editor/Reader
All of the following
Any of the following
Foxit PDF Editor<=13.2.4.24048
Foxit PDF Editor>=14.0.0.33046<=14.0.4.33508
Foxit PDF Editor>=2023.1.0.15510<=2023.3.0.23028
Foxit PDF Editor>=2024.1.0.23997<=2024.4.1.27687
Foxit PDF Editor>=2025.1.0.27937<=2025.3.0.35737
Foxit PDF Editor>=2026.1.0.36452<=2026.1.1.36485
Foxit PDF Reader<=2026.1.1.36485
Microsoft Windows
Event History
Jul 8, 2026
CVE Published
via MITRE·07:36 AM
Data Sourced
via MITRE·07:36 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·09:16 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2026-13127?
The severity of CVE-2026-13127 is rated high with a score of 7.8.
2
How do I fix CVE-2026-13127?
To fix CVE-2026-13127, update to the latest version of Foxit PDF Editor/Reader as recommended by the vendor.
3
What kind of vulnerability is CVE-2026-13127?
CVE-2026-13127 is a Use-After-Free vulnerability that can lead to remote code execution.
4
What are the potential impacts of CVE-2026-13127?
Exploitation of CVE-2026-13127 may lead to application crashes and unauthorized execution of code.
5
Who is affected by CVE-2026-13127?
Users of Foxit PDF Editor/Reader are affected by CVE-2026-13127.