MEDIUM🇬🇧 English

CVE-2026-5938

CVSS 5.5v3.1pub. 2026-04-27upd. 2026-04-29

Improper control flow management allows a crafted document action chain to cause modal dialog reentry on the main thread, resulting in UI freeze and denial of service.

oryginał EN
CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

  • Foxit Pdf Editor

    APP
    Foxit
    < 13.2.414.0.0 – 14.0.4 (bez)2023.0.0 – 2026.1.1 (bez)

  • Foxit Pdf Reader

    APP
    Foxit
    < 2026.1.1
🔵
ZWERYFIKUJ U PRODUCENTA
Brak jednoznacznych danych o patchu. Sprawdź referencje od producenta.
Tagi
DoS
CWE
Referencje

Powiązane podatności

CVE-2022-28104CRITICAL9.8ten sam produkt

Foxit PDF Editor v11.3.1 was discovered to contain an arbitrary file upload vulnerability.

CVE-2022-24954CRITICAL9.8ten sam produkt

Foxit PDF Reader before 11.2.1 and Foxit PDF Editor before 11.2.1 have a Stack-Based Buffer Overflow related t...

CVE-2022-24955CRITICAL9.8ten sam produkt

Foxit PDF Reader before 11.2.1 and Foxit PDF Editor before 11.2.1 have an Uncontrolled Search Path Element for...

CVE-2021-38563CRITICAL9.8ten sam produkt

An issue was discovered in Foxit PDF Reader before 11.0.1 and PDF Editor before 11.0.1. It mishandles situatio...

CVE-2026-5940HIGH7.8ten sam produkt

Calling a function that triggers a UI refresh after removing comments via a script may access an invalidated o...