CVE-2026-57246

HighCVSS 7.8/10Last modified Jul 9, 2026

Description

When dealing with abnormally constructed objects, there is a lack of argument validation; JavaScript triggers signature verification, but the signature plugin does not perform validation when copying the abnormal string, causing the application to crash.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-120

Affected software

No affected versions have been published.

Timeline

Published: Jul 8, 2026
Last modified: Jul 9, 2026
NVD status: Analyzed

Related CVEs from 2026

CVE-2026-572477.8The application re-enters the document structure via field processing and deletes the current page, and then continues using the field objec CVE-2026-572487.8When the application opens a PDF file and JavaScript writes annotation attributes, there is a lack of sufficient object type and argument ch CVE-2026-572497.8After the application opened the PDF file, the script first reset the annotation status, then triggered the reset form event by additional a CVE-2026-57256.1The Favicon Rotator plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'fvrt_' prefixed request parameters in all CVE-2026-572507.8When the application opens a PDF and JavaScript resets the form fields, the script re-enters the interface. The underlying native object is CVE-2026-572517.8The application opens a PDF, but the cloud-like appearance of the construction process lacks proper setting of an upper limit and consistenc CVE-2026-572527.8When the application opens a PDF file, during the process of JavaScript deleting pages and removing attachment annotations, it will cause th CVE-2026-572536.1An abnormal image object causes the renderer to enter the wrong processing branch. When converting the scan lines, an invalid image buffer p CVE-2026-572547.8There is an abnormal annotation within the PDF that is referenced by other objects. When the application parses the PDF, it fails to perform CVE-2026-572556.1The application opens a PDF containing an abnormal color space whose attributes reference a valid but semantically malformed function. The f CVE-2026-572567.8When the application opens a PDF and executes JavaScript, it performs abnormal operations on the list box field, and this operation is repea CVE-2026-572576.1During the PRC parsing stage, there is a lack of boundary verification for the PRC entity index, which leads to an out-of-bounds read of the