جزئیات آسیب‌پذیری

CVE-2026-5940

Foxit Software Foxit PDF EditorFoxit Software Foxit PDF Reader

Foxit PDF Editor/Reader Annotation Use-After-Free Remote Code Execution Vulnerability

CVSS 3.1

7.8بالا

Calling a function that triggers a UI refresh after removing comments via a script may access an invalidated object, leading to program crashes.

امتیاز	نسخه	منبع	بردار
7.8بالا	3.1	CVEProject cvelistV5 (CNA) (Foxit)	`CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H`

فروشنده	محصول	نسخه‌ها	منبع
Foxit Software Inc.	Foxit PDF Editor	Versions 13.2.3 and earlier	CVEProject cvelistV5 (CNA)
Foxit Software Inc.	Foxit PDF Editor	Versions 14.0.3 and earlier	CVEProject cvelistV5 (CNA)
Foxit Software Inc.	Foxit PDF Editor	Versions 2026.1 and earlier	CVEProject cvelistV5 (CNA)
Foxit Software Inc.	Foxit PDF Reader	Versions 2026.1 and earlier	CVEProject cvelistV5 (CNA)

۰٫۱۶٪

احتمال بهره‌برداری در ۳۰ روز

۶٫۳٪

صدک (نسبت به همه‌ی CVEها)