CVE-2026-5942

{
  "id": "CVE-2026-5942",
  "sourceIdentifier": "14984358-7092-470d-8f34-ade47a7658a2",
  "published": "2026-04-27T12:16:24.603",
  "lastModified": "2026-10-26T21:10:00.170",
  "vulnStatus": "Analyzed",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Flaws in page lifecycle management allow document structure changes to desynchronize internal component states, causing subsequent operations to access invalidated objects and crash the program."
    },
    {
      "lang": "es",
      "value": "Defectos en la gestión del ciclo de vida de la página permiten que los cambios en la estructura del documento desincronicen los estados internos de los componentes, lo que provoca que operaciones posteriores accedan a objetos invalidados y bloqueen el programa."
    }
  ],
  "affected": [
    {
      "source": "14984358-7092-470d-8f34-ade47a7658a2",
      "affectedData": [
        {
          "vendor": "Foxit Software Inc.",
          "product": "Foxit PDF Editor",
          "defaultStatus": "unaffected",
          "platforms": [
            "Windows"
          ],
          "versions": [
            {
              "version": "Versions 2026.1 and earlier",
              "status": "affected"
            },
            {
              "version": "Versions 14.0.3 and earlier",
              "status": "affected"
            },
            {
              "version": "Versions 13.2.3 and earlier",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Foxit Software Inc.",
          "product": "Foxit PDF Reader",
          "defaultStatus": "unaffected",
          "versions": [
            {
              "version": "Versions 2026.1 and earlier",
              "status": "affected"
            }
          ]
        }
      ]
    }
  ],
  "metrics": {
    "cvssMetricV31": [
      {
        "source": "14984358-7092-470d-8f34-ade47a7658a2",
        "type": "Secondary",
        "cvssData": {
          "version": "3.1",
          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
          "baseScore": 5.5,
          "baseSeverity": "MEDIUM",
          "attackVector": "LOCAL",
          "attackComplexity": "LOW",
          "privilegesRequired": "NONE",
          "userInteraction": "REQUIRED",
          "scope": "UNCHANGED",
          "confidentialityImpact": "NONE",
          "integrityImpact": "NONE",
          "availabilityImpact": "HIGH"
        },
        "exploitabilityScore": 1.8,
        "impactScore": 3.6
      }
    ],
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "timestamp": "2026-04-27T13:38:11.039409Z",
          "id": "CVE-2026-5942",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "role": "CISA Coordinator",
          "version": "2.0.3"
        }
      }
    ]
  },
  "weaknesses": [
    {
      "source": "14984358-7092-470d-8f34-ade47a7658a2",
      "type": "Secondary",
      "description": [
        {
          "lang": "en",
          "value": "CWE-416"
        }
      ]
    }
  ],
  "configurations": [
    {
      "nodes": [
        {
          "operator": "OR",
          "negate": false,
          "cpeMatch": [
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:foxit:pdf_editor:*:*:*:*:*:*:*:*",
              "versionEndExcluding": "13.2.4",
              "matchCriteriaId": "388A59F0-28A7-436B-BC75-C77E58F4ECDE"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:foxit:pdf_editor:*:*:*:*:*:*:*:*",
              "versionStartIncluding": "14.0.0",
              "versionEndExcluding": "14.0.4",
              "matchCriteriaId": "6C4B8779-474C-43FC-B02E-3754BFAB2432"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:foxit:pdf_editor:*:*:*:*:*:*:*:*",
              "versionStartIncluding": "2023.0.0",
              "versionEndExcluding": "2026.1.1",
              "matchCriteriaId": "D3D204C5-D29B-4341-B48E-6F634E41126E"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:foxit:pdf_reader:*:*:*:*:*:*:*:*",
              "versionEndExcluding": "2026.1.1",
              "matchCriteriaId": "C18DA4A1-62E6-4734-840D-B5280B765A9E"
            }
          ]
        }
      ]
    }
  ],
  "references": [
    {
      "url": "https://www.foxit.com/support/security-bulletins.html",
      "source": "14984358-7092-470d-8f34-ade47a7658a2",
      "tags": [
        "Vendor Advisory"
      ]
    }
  ]
}