CVE-2026-5942CWE-416

Foxit PDF Editor/Reader AcroForm Signature Use-After-Free Vulnerability

Medium · published April 27, 2026

CVSS v3.1
5.5
EPSS
0%
Percentile
3.7
In the wild
Unconfirmed
What it is

Flaws in page lifecycle management allow document structure changes to desynchronize internal component states, causing subsequent operations to access invalidated objects and crash the program.

The record
Technical detail
CVSS v3.1
5.5 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00148 · 3.7th percentile
Weakness
CWE-416 · Use After Free
Published
2026-04-27T11:00Z
EPSS history
Timeline
  • 27 APR 11:00Z
    Foxit PDF Editor/Reader AcroForm Signature Use-After-Free Vulnerability
    cvelistv5