CVE Database
/

CVE-2026-5943

Back to search

CVE-2026-5943

Published: Apr 27, 2026

Modified: Apr 28, 2026

PUBLISHED

CVSS v3.1

7.8

HIGH

Description

Document structural anomalies caused inconsistencies between page element relationships and internal index states. When scripts triggered document modifications, object reference validity was not properly maintained, leading to a crash when accessing an invalid pointer during page information queries.

VendorProductVersions

Foxit Software Inc.

Foxit PDF Editor

affected
Versions 2026.1 and earlier
affected
Versions 14.0.3 and earlier
affected
Versions 13.2.3 and earlier

Foxit Software Inc.

Foxit PDF Reader

affected
Versions 2026.1 and earlier

Weaknesses (CWE)

CVSS v3.1 Details

CVSS v3.1 Vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Attack Vector

Local

Attack Complexity

Low

Privileges Required

None

User Interaction

Required

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now