← Back to CVEs
CVE-2026-5940
HIGH7.8
Description
Calling a function that triggers a UI refresh after removing comments via a script may access an invalidated object, leading to program crashes.
CVE Details
CVSS v3.1 Score7.8
SeverityHIGH
CVSS VectorCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Attack VectorLOCAL
ComplexityLOW
Privileges RequiredNONE
User InteractionREQUIRED
Published4/27/2026
Last Modified4/27/2026
Sourcenvd
Honeypot Sightings0
Weaknesses (CWE)
CWE-416
References
https://www.foxit.com/support/security-bulletins.html(14984358-7092-470d-8f34-ade47a7658a2)
IOC Correlations
No correlations recorded
This product uses data from the NVD API but is not endorsed or certified by the NVD.