Records35All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high27CVSS 7.0–8.9
Exploited now
Gonitro records in CISA KEVNo Gonitro vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsPriority LOW 39
Nitro PDF Pro before 14.43 for Windows contains a NULL pointer dereference vulnerability in the JavaScript implementation of app.alert().
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00428 · Published 2026-04-13 · No fix listed CWE-476
Priority LOW 39
A NULL pointer dereference in Nitro PDF Pro for Windows v14.41.1.4 allows attackers to cause a Denial of Service (DoS) via a crafted XFA packet.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00442 · Published 2026-04-13 · No fix listed CWE-476
Priority LOW 38
Nitro PDF Pro for Windows 14.41.1.4 contains a heap use-after-free vulnerability in the implementation of the JavaScript method this.mailDoc().
CVSS 3.1HIGH 8.4· Local · No auth · No interaction · EPSS 0.00199 · Published 2026-04-13 · No fix listed CWE-416
Priority LOW 38
A potential remote code execution vulnerability exists in the PDF parsing functionality of Nitro Pro 10.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.01958 · Published 2017-02-10 · No fix listed
Priority LOW 37
A remote out of bound write / memory corruption vulnerability exists in the PDF parsing functionality of Nitro Pro 10.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.01293 · Published 2017-02-10 · No fix listed CWE-787
Priority LOW 36
A remote out of bound write / memory corruption vulnerability exists in the PDF parsing functionality of Nitro Pro 10.5.9.9.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.01057 · Published 2017-02-10 · No fix listed CWE-787
Priority LOW 23
An issue was discovered in Nitro PDF Pro for Windows before 14.42.0.34.
CVSS 3.1MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.00091 · Published 2026-01-08 · No fix listed CWE-346
THREATIST.IORead the docs