WID-SEC-W-2026-1281

csafDEcert_bund

DeutschShown in its original language — a full translation is planned for a future version.

Foxit PDF Reader und Editor: Mehrere Schwachstellen

view advisory published 2026-04-26

Ein Angreifer kann mehrere Schwachstellen in Foxit PDF Reader und Foxit PDF Editor ausnutzen, um einen Denial of Service Angriff durchzuführen oder Code auszuführen.

01

describes (7)

Related CVEs.

IDseverity exploitable
CVE-2026-5943US——
Document structural anomalies caused inconsistencies between page element relationships and internal index states. When scripts triggered document modifications, object reference v…
CVE-2026-5942US——
Flaws in page lifecycle management allow document structure changes to desynchronize internal component states, causing subsequent operations to access invalidated objects and cras…
CVE-2026-5941UShigh7.1—
Parsing logic flaws cause non-signature data to be misidentified as valid signatures when processing malformed form field hierarchies, leading to invalid memory writes and program…
CVE-2026-5940USmedium5.5—
Calling a function that triggers a UI refresh after removing comments via a script may access an invalidated object, leading to program crashes.
CVE-2026-5939US——
A crafted XFA PDF can trigger a use-after-free condition during calculate event processing, causing the application to crash and resulting in an arbitrary code execution.
CVE-2026-5938US——
Improper control flow management allows a crafted document action chain to cause modal dialog reentry on the main thread, resulting in UI freeze and denial of service.
CVE-2026-5937US——
Insufficient parameter verification leads to the occurrence of format errors in files, which will trigger an unhandled "std::invalid_argument" exception, ultimately causing the pro…
02

references

External citations — patches, advisories, analysis.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan