CVE-2026-13128
HighCVSS 7.8Exploitation Probability (EPSS)
Low risk2th percentile - higher than 2% of all known CVEs
Summary
Embedding JavaScript within a PDF file will cause the page to be deleted. Subsequent scripts will continue to access the relevant properties of the document view, eventually leading to the crash of the application.
Risk Assessment
An attacker can exploit this vulnerability to crash the application, potentially causing user disruption and loss of unsaved data.
Recommendation
It is recommended to immediately update the software to a version that includes a fix for CVE-2026-13128. Until the update, avoid opening untrusted PDF files.
Original NVD description (English source)
Embedding JavaScript within a PDF file will cause the page to be deleted. Subsequent scripts will continue to access the relevant properties of the document view, eventually leading to the crash of the application.