Findings

CVE-2026-5940

Calling a function that triggers a UI refresh after removing comments via a script may access an invalidated object, leading to program crashes.

Published Apr 27, 2026 · updated Jun 17, 2026 · foxit pdf editor

Calling a function that triggers a UI refresh after removing comments via a script may access an invalidated object, leading to program crashes.

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

  1. Apr 27, 2026 · NIST NVD

    Detected

    Calling a function that triggers a UI refresh after removing comments via a script may access an invalidated object, leading to program crashes.

  2. Jun 17, 2026 · NIST NVD

    Updated

    Calling a function that triggers a UI refresh after removing comments via a script may access an invalidated object, leading to program crashes.

Affected

  • cpe foxit/pdf editorversion unspecified
  • cpe foxit/pdf readerversion unspecified

Sources

  • CVE.orgVulnerability recordCVE-2026-5940

    Official CVE identifier

    cve.org
  • NIST NVDVulnerability recordCVE-2026-5940

    Calling a function that triggers a UI refresh after removing comments via a script may access an invalidated object, leading to program crashes.

    nvd.nist.gov

References