Home
HIGH: 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HDefault status
unaffected
Versions 2025.3 and earlier
affected
Versions 14.0.2 and earlier
affected
Versions 13.2.2 and earlier
affected
Default status
unaffected
Versions 2025.3 and earlier
affected
Description
The application's list box calculate array logic keeps stale references to page or form objects after they are deleted or re-created, which allows crafted documents to trigger a use-after-free when the calculation runs and can potentially lead to arbitrary code execution.
Problem types
Product status
Versions 2025.3 and earlier
Versions 14.0.2 and earlier
Versions 13.2.2 and earlier
Versions 2025.3 and earlier
Credits
KPC of Cisco Talos
References
www.talosintelligence.com/...ability_reports/TALOS-2026-2365
www.foxit.com/support/security-bulletins.html