CVE-2026-57243

MediumCVSS 6.1

Published: 08/07/2026(UTC)Updated: 09/07/2026(UTC)Translated: 10/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.11%

1th percentile - higher than 1% of all known CVEs

Summary

During page opening and form formatting, a JavaScript reentrancy causes an inconsistent document status. Using outdated page information, the application attempts to access invalid addresses, leading to a crash.

Risk Assessment

The risk involves potential denial of service (DoS) where an attacker can intentionally trigger the crash, disrupting service availability for users.

Recommendation

Immediately update to the latest software version containing the fix for the JavaScript reentrancy issue. Additionally, review the code responsible for form formatting and page opening for similar vulnerabilities.

Other vulnerabilities in Web Browser

CVE-2026-57244High
After JavaScript resets the form, the synchronization process lacks re-entry protection and object lifecycle verification, causing the control pointer to fail during traversal. The application continues to dereference the failed pointer, leading to a crash.

Original NVD description (English source)

During the process of page opening and form formatting, a JavaScript reentrancy results in an inconsistent document status. Subsequently, with outdated page information, the application attempts to access invalid addresses, causing the application to crash.