PatchSiren

PatchSiren cyber security CVE debrief

CVE-2026-5937 Foxit CVE debrief

A medium-severity vulnerability in Foxit's PDF Editor and PDF Reader could allow local attackers to terminate a program via a crafted file. This issue arises from insufficient parameter verification, leading to an unhandled 'std::invalid_argument' exception. The vulnerability requires local access and user interaction, potentially disrupting business operations that rely on these applications. Defenders and administrators responsible for systems with Foxit PDF Editor and PDF Reader installed should assess exposure and prioritize patching. They should also verify affected versions and implement necessary security measures to mitigate potential risks.

Vendor
Foxit
Product
PDF Editor
CVSS
MEDIUM 5.5
CISA KEV
Not listed in stored evidence
Original CVE published
2026-04-27
Original CVE updated
2026-10-26
Advisory published
2026-04-27
Advisory updated
2026-10-26

Who should care

Defenders and administrators responsible for systems with Foxit PDF Editor and PDF Reader installed should assess exposure and prioritize patching.

Why it matters

CVE-2026-5937 is a medium-severity vulnerability in Foxit PDF Editor and PDF Reader that could allow local attackers to terminate programs via crafted files. Defenders and administrators should assess exposure, prioritize patching, and verify affected versions.

  • Termination of Foxit PDF Editor and PDF Reader programs via crafted files.
  • Potential disruption to business operations relying on these applications.
  • Need for verification of affected versions and exposure.
  • Prioritization of patching and inventory checks for these applications.

Technical summary

Insufficient parameter verification in Foxit PDF Editor and PDF Reader leads to an unhandled 'std::invalid_argument' exception, causing the program to terminate. This medium-severity vulnerability requires local access and user interaction. The issue is triggered by a crafted file that exploits the insufficient parameter verification, resulting in program termination. Defenders should focus on assessing exposure, prioritizing patching for PDF Editor and PDF Reader users, and verifying affected versions to mitigate potential risks.

Defensive priority

Assess exposure, prioritize patching for PDF Editor and PDF Reader users.

Recommended defensive actions

  • Review and apply vendor patches for Foxit PDF Editor and PDF Reader.
  • Inventory systems for Foxit PDF Editor and PDF Reader usage.
  • Monitor for potential local attacks on systems with Foxit PDF Editor and PDF Reader installed.

Evidence notes

The CVE and NVD provide details on insufficient parameter verification in Foxit's PDF Editor and PDF Reader, leading to program termination via an unhandled exception.

Sources and references

Verified primary and authoritative sources

  • CVE-2026-5937 CVE Program record

    Publisher, destination, and source semantics verified

    URL: https://www.cve.org/CVERecord?id=CVE-2026-5937

    CVE Program - Official CVE Program record with source-provided CVE metadata.

  • CVE-2026-5937 NVD vulnerability detail

    Publisher, destination, and source semantics verified

    URL: https://nvd.nist.gov/vuln/detail/CVE-2026-5937

    NIST National Vulnerability Database - Official NIST NVD detail page and source-specific vulnerability assessment.

Supplemental references

  • Source reference

    Unverified legacy reference

    URL: https://www.foxit.com/support/security-bulletins.html

    14984358-7092-470d-8f34-ade47a7658a2 - Vendor Advisory

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.