This vulnerability (CVE-2026-5938) in Foxit PDF Editor arises from improper control flow management (CWE-691). Specifically, a crafted document action chain can cause modal dialog reentry on the main thread, which leads to the application UI freezing and denial of service. The issue affects multiple versions of Foxit PDF Editor up to 2026.1, 14.0.3, and 13.2.3. The CVSS v3.1 base score is 5.5, reflecting a medium severity with local attack vector, low attack complexity, no privileges required, user interaction required, unchanged scope, and impact limited to availability. There is no vendor advisory or patch information available, and no known exploits have been reported.

The vulnerability causes a denial of service condition by freezing the user interface of Foxit PDF Editor when processing a specially crafted document. This impacts availability but does not affect confidentiality or integrity of data. The attack requires local access and user interaction, limiting the ease of exploitation.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, users should exercise caution when opening untrusted PDF documents. No official fix or temporary workaround has been published by Foxit Software Inc. at this time.