CVE-2026-5938

{
  "id": "CVE-2026-5938",
  "sourceIdentifier": "14984358-7092-470d-8f34-ade47a7658a2",
  "published": "2026-04-27T12:16:24.153",
  "lastModified": "2026-10-26T21:10:00.170",
  "vulnStatus": "Analyzed",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Improper control flow management allows a crafted document action chain to cause modal dialog reentry on the main thread, resulting in UI freeze and denial of service."
    },
    {
      "lang": "es",
      "value": "La gestión inadecuada del flujo de control permite que una cadena de acciones de documento manipulada cause una reentrada de diálogo modal en el hilo principal, lo que resulta en la congelación de la interfaz de usuario y denegación de servicio."
    }
  ],
  "affected": [
    {
      "source": "14984358-7092-470d-8f34-ade47a7658a2",
      "affectedData": [
        {
          "vendor": "Foxit Software Inc.",
          "product": "Foxit PDF Editor",
          "defaultStatus": "unaffected",
          "platforms": [
            "Windows"
          ],
          "versions": [
            {
              "version": "Versions 2026.1 and earlier",
              "status": "affected"
            },
            {
              "version": "Versions 14.0.3 and earlier",
              "status": "affected"
            },
            {
              "version": "Versions 13.2.3 and earlier",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Foxit Software Inc.",
          "product": "Foxit PDF Reader",
          "defaultStatus": "unaffected",
          "platforms": [
            "Windows"
          ],
          "versions": [
            {
              "version": "Versions 2026.1 and earlier",
              "status": "affected"
            }
          ]
        }
      ]
    }
  ],
  "metrics": {
    "cvssMetricV31": [
      {
        "source": "14984358-7092-470d-8f34-ade47a7658a2",
        "type": "Secondary",
        "cvssData": {
          "version": "3.1",
          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
          "baseScore": 5.5,
          "baseSeverity": "MEDIUM",
          "attackVector": "LOCAL",
          "attackComplexity": "LOW",
          "privilegesRequired": "NONE",
          "userInteraction": "REQUIRED",
          "scope": "UNCHANGED",
          "confidentialityImpact": "NONE",
          "integrityImpact": "NONE",
          "availabilityImpact": "HIGH"
        },
        "exploitabilityScore": 1.8,
        "impactScore": 3.6
      }
    ],
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "timestamp": "2026-04-27T13:38:23.323940Z",
          "id": "CVE-2026-5938",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "role": "CISA Coordinator",
          "version": "2.0.3"
        }
      }
    ]
  },
  "weaknesses": [
    {
      "source": "14984358-7092-470d-8f34-ade47a7658a2",
      "type": "Secondary",
      "description": [
        {
          "lang": "en",
          "value": "CWE-691"
        }
      ]
    }
  ],
  "configurations": [
    {
      "nodes": [
        {
          "operator": "OR",
          "negate": false,
          "cpeMatch": [
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:foxit:pdf_editor:*:*:*:*:*:*:*:*",
              "versionEndExcluding": "13.2.4",
              "matchCriteriaId": "388A59F0-28A7-436B-BC75-C77E58F4ECDE"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:foxit:pdf_editor:*:*:*:*:*:*:*:*",
              "versionStartIncluding": "14.0.0",
              "versionEndExcluding": "14.0.4",
              "matchCriteriaId": "6C4B8779-474C-43FC-B02E-3754BFAB2432"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:foxit:pdf_editor:*:*:*:*:*:*:*:*",
              "versionStartIncluding": "2023.0.0",
              "versionEndExcluding": "2026.1.1",
              "matchCriteriaId": "D3D204C5-D29B-4341-B48E-6F634E41126E"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:foxit:pdf_reader:*:*:*:*:*:*:*:*",
              "versionEndExcluding": "2026.1.1",
              "matchCriteriaId": "C18DA4A1-62E6-4734-840D-B5280B765A9E"
            }
          ]
        }
      ]
    }
  ],
  "references": [
    {
      "url": "https://www.foxit.com/support/security-bulletins.html",
      "source": "14984358-7092-470d-8f34-ade47a7658a2",
      "tags": [
        "Vendor Advisory"
      ]
    }
  ]
}