CVE-2026-5938

Published: Apr 27, 2026Modified: Jun 17, 2026

5.5

Vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Exploitability: 1.8 / Impact: 3.6

Source: 14984358-7092-470d-8f34-ade47a7658a2 (Secondary)

Description

Improper control flow management allows a crafted document action chain to cause modal dialog reentry on the main thread, resulting in UI freeze and denial of service.

Affected (4)

Products: Foxit: Pdf Editor, Pdf Reader

Foxit

2 products

Pdf Editor

Pdf Reader

Configuration A

4 vulnerable

Vulnerable Software	Affected Versions
Foxit Pdf Editor	Before 13.2.4
Foxit Pdf Editor	From 14.0.0 to 14.0.4
Foxit Pdf Editor	From 2023.0.0 to 2026.1.1
Foxit Pdf Reader	Before 2026.1.1

Related CWEs

CWE-691

Insufficient Control Flow Management

The code does not sufficiently manage its control flow during execution, creating conditions in which the control flow can be modified in unexpected ways.

References (1)

https://www.foxit.com/support/security-bulletins.html

Source: 14984358-7092-470d-8f34-ade47a7658a2

Vendor Advisory

Timeline

No history available yet.