CVE-2026-57244

HighCVSS 7.8

Published: 08/07/2026(UTC)Updated: 09/07/2026(UTC)Translated: 10/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.12%

2th percentile - higher than 2% of all known CVEs

Summary

After JavaScript resets the form, the synchronization process lacks re-entry protection and object lifecycle verification, causing the control pointer to fail during traversal. The application continues to dereference the failed pointer, leading to a crash.

Risk Assessment

The risk is that an attacker could intentionally trigger a crash by resetting the form, potentially causing a denial of service (DoS).

Recommendation

Implement re-entry protection and object lifecycle verification in the synchronization process after form reset.

Other vulnerabilities in Web Browser

CVE-2026-57243Medium
During page opening and form formatting, a JavaScript reentrancy causes an inconsistent document status. Using outdated page information, the application attempts to access invalid addresses, leading to a crash.

Original NVD description (English source)

After JavaScript resetting the form, the synchronization process lacks re-entry protection and object lifecycle verification, resulting in the failure of the control pointer during the traversal process. After the pointer fails, it still continues to dereference, causing the application to crash.