CVE-2026-57238

Radar advisories

• 2026-09-23 ZDI ZDI-26-728: Foxit PDF Reader Doc Object Use-After-Free Information Disclosure Vulnerability The use-after-free leads to information disclosure, but exploitation requires user interaction.
• 2026-08-24 ZDI ZDI-26-599: Foxit PDF Reader Annotation Use-After-Free Information Disclosure Vulnerability The advisory notes a use-after-free in Foxit PDF Reader’s annotation handling that can disclose information.

References

• NVD ↗
• CVE.org ↗
• Zero Day Initiative ↗