What is the CVSS score of EUVD-2026-25828?

EUVD-2026-25828 has a CVSS 3.1 base score of 5.5 (Medium). CVSS vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H. EPSS exploitation probability: 0.0%.

Foxit PDF Editor and Reader EUVD-2026-25828

| CVE-2026-5942 MEDIUM

Use After Free (CWE-416)

2026-04-27 Foxit

Memory Corruption Use After Free Denial Of Service Foxit Pdf Editor Foxit Pdf Reader

5.5

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

5.5 MEDIUM

AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Attack Vector

Local

Attack Complexity

Low

Privileges Required

None

User Interaction

Required

Scope

Unchanged

Confidentiality

None

Integrity

None

Availability

High

Lifecycle Timeline

Analysis Generated

Apr 27, 2026 - 12:01 vuln.today

EUVD ID Assigned

Apr 27, 2026 - 11:30 euvd

EUVD-2026-25828

Analysis Generated

Apr 27, 2026 - 11:30 vuln.today

CVE Published

Apr 27, 2026 - 11:00 nvd

MEDIUM 5.5

DescriptionCVE.org

Flaws in page lifecycle management allow document structure changes to desynchronize internal component states, causing subsequent operations to access invalidated objects and crash the program.

AnalysisAI

Use-after-free vulnerability in Foxit PDF Editor and PDF Reader allows local attackers to crash the application by manipulating document page lifecycle events, causing internal component states to desynchronize and subsequent operations to reference invalidated memory objects. Attack requires user interaction to open a malicious PDF file and does not enable information disclosure or code execution; impact is denial of service with CVSS 5.5 (medium severity). No public exploit code or active exploitation confirmed at time of analysis.

Technical ContextAI

This vulnerability stems from improper management of object lifecycles within the PDF document processing engine (CWE-416: Use After Free). When Foxit's page lifecycle handler processes structural changes to a PDF document-such as page reordering, deletion, or dynamic content updates-internal component state tracking fails to synchronize with the modified document structure. This desynchronization causes the application to maintain stale pointers or references to PDF objects that have been freed or invalidated. Subsequent operations, such as rendering, annotation processing, or form field handling, dereference these invalid references, triggering memory access violations and application crashes. The vulnerability affects both Foxit PDF Editor (full-featured desktop editor) and Foxit PDF Reader (document viewer), as both share common PDF parsing and lifecycle management libraries.

RemediationAI

Check Foxit's official security bulletins at https://www.foxit.com/support/security-bulletins.html for the specific patched version of Foxit PDF Editor and PDF Reader that addresses CVE-2026-5942, then upgrade both products to that patched release. Until patching is available or deployed, implement defense-in-depth controls: restrict opening of PDF files from untrusted sources (disable external document downloads in email clients, block PDF execution from web browsers in sandboxed environments), disable JavaScript execution within PDF documents if business requirements permit, and monitor for application crashes or unexpected terminations of Foxit processes as an indicator of exploitation attempts. If patching is delayed, consider running Foxit products within OS-level sandboxes (Windows Sandbox, macOS sandbox, or containers) to isolate crashes and prevent system-wide impact.