Is CVE-2026-13128 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-13128?

CVE-2026-13128 has a CVSS v3 severity of HIGH (7.8).

What does CVE-2026-13128 affect?

CVE-2026-13128 affects pdf_editor, pdf_reader.

Back

CVE-2026-13128

Monitor on ThreatCluster

Description

Embedding JavaScript within a PDF file will cause the page to be deleted. Subsequent scripts will continue to access the relevant properties of the document view, eventually leading to the crash of the application.