CVE-2026-5939

MediumCVSS 5.5/10Last modified Oct 26, 2026

Description

A crafted XFA PDF can trigger a use-after-free condition during calculate event processing, causing the application to crash and resulting in an arbitrary code execution.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-416

Affected software

VendorProductVersions
Foxit Software Inc.Foxit PDF EditorVersions 2026.1 and earlier; Versions 14.0.3 and earlier
Foxit Software Inc.Foxit PDF ReaderVersions 2026.1 and earlier

References

Timeline

Published
Apr 27, 2026
Last modified
Oct 26, 2026
NVD status
Analyzed

Related CVEs from 2026

CVE-2026-593964.9A denial-of-service vulnerability exists in UAA's private_key_jwt client-authentication mechanism. When UAA retrieves a remote JWKS URI, it CVE-2026-59405.5Calling a function that triggers a UI refresh after removing comments via a script may access an invalidated object, leading to program crasCVE-2026-59417.1Parsing logic flaws cause non-signature data to be misidentified as valid signatures when processing malformed form field hierarchies, leadiCVE-2026-59425.5Flaws in page lifecycle management allow document structure changes to desynchronize internal component states, causing subsequent operationCVE-2026-59437.8Document structural anomalies caused inconsistencies between page element relationships and internal index states. When scripts triggered doCVE-2026-59448.2An improper access control vulnerability exists in the Cisco Intersight Device Connector for Nutanix Prism Central. The service exposes an ACVE-2026-59467.5Multiple flaws have been identified in `named` related to the handling of DNS messages whose CLASS is not Internet (`IN`) — for example, `CHCVE-2026-59475.9Undefined behavior may result due to a race condition leading to a use-after-free violation. If BIND receives an incoming DNS message signeCVE-2026-594998.6: Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Priority Portal Generator addon to Priority ERP (developed by CVE-2026-59505.3An unbounded resend loop vulnerability exists in the BIND 9 resolver state machine during bad-server handling, enabling a remote unauthenticCVE-2026-5950010.0: Improper Authentication vulnerability in Priority Portal Generator addon to Priority ERP (developed by Soft Solutions). This issue affectCVE-2026-595018.2: Improper Access Control vulnerability in Priority Portal Generator addon to Priority ERP (developed by Soft Solutions). This issue affect
CVE-2026-5939: Medium severity, CVSS 5.5 | Vulnix