This vulnerability (CVE-2026-57252) in Foxit PDF Editor involves a use-after-free condition triggered during the handling of JavaScript that deletes pages and removes attachment annotations in a PDF file. The issue causes the attachment panel to access memory that has already been freed, resulting in an application crash. The CVSS 3.1 vector indicates the attack requires local access with low complexity, no privileges, and user interaction, impacting confidentiality, integrity, and availability with high severity. No known exploits are reported in the wild, and no patch or remediation level has been disclosed by the vendor as of the publication date.

Successful exploitation can cause the Foxit PDF Editor application to crash due to invalid memory access. The CVSS score reflects high impact on confidentiality, integrity, and availability, meaning the vulnerability could potentially be leveraged to disrupt application functionality or cause denial of service. However, no evidence of active exploitation is currently known.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should exercise caution when opening PDF files from untrusted sources, especially those containing JavaScript that manipulates pages or attachments. No vendor-provided mitigation or workaround is currently documented.