CVE-2026-57244

HighCVSS 7.8/10Last modified Jul 9, 2026

Description

After JavaScript resetting the form, the synchronization process lacks re-entry protection and object lifecycle verification, resulting in the failure of the control pointer during the traversal process. After the pointer fails, it still continues to dereference, causing the application to crash.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-416

Affected software

No affected versions have been published.

Timeline

Published: Jul 8, 2026
Last modified: Jul 9, 2026
NVD status: Analyzed

Related CVEs from 2026

CVE-2026-572457.8When the application opens a PDF, traverses and builds the annotation elements related to hyperlinks, it fails to validate the abnormal anno CVE-2026-572467.8When dealing with abnormally constructed objects, there is a lack of argument validation; JavaScript triggers signature verification, but th CVE-2026-572477.8The application re-enters the document structure via field processing and deletes the current page, and then continues using the field objec CVE-2026-572487.8When the application opens a PDF file and JavaScript writes annotation attributes, there is a lack of sufficient object type and argument ch CVE-2026-572497.8After the application opened the PDF file, the script first reset the annotation status, then triggered the reset form event by additional a CVE-2026-57256.1The Favicon Rotator plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'fvrt_' prefixed request parameters in all CVE-2026-572507.8When the application opens a PDF and JavaScript resets the form fields, the script re-enters the interface. The underlying native object is CVE-2026-572517.8The application opens a PDF, but the cloud-like appearance of the construction process lacks proper setting of an upper limit and consistenc CVE-2026-572527.8When the application opens a PDF file, during the process of JavaScript deleting pages and removing attachment annotations, it will cause th CVE-2026-572536.1An abnormal image object causes the renderer to enter the wrong processing branch. When converting the scan lines, an invalid image buffer p CVE-2026-572547.8There is an abnormal annotation within the PDF that is referenced by other objects. When the application parses the PDF, it fails to perform CVE-2026-572556.1The application opens a PDF containing an abnormal color space whose attributes reference a valid but semantically malformed function. The f