Skip to content
OpenAdvisories
High · 7.8 CVE-2026-5940 EUVD-2026-25826GHSA-gmwv-jpmc-ppqc

Foxit PDF Editor/Reader Annotation Use-After-Free Remote Code Execution Vulnerability

Published Apr 27, 2026 · Updated Apr 28, 2026 · Assigned by Foxit

Vendor: Foxit Product: Foxit PDF Reader Product: foxit_pdf_editor

Description

Calling a function that triggers a UI refresh after removing comments via a script may access an invalidated object, leading to program crashes.

Affected products

VendorProductAffectedFixed
Foxit Software Foxit PDF Editor Versions 2026.1 and earlier, Versions 14.0.3 and earlier, Versions 13.2.3 and earlier —
Foxit Software Foxit PDF Reader Versions 2026.1 and earlier —

Advisories 1

References