Priority MEDIUM 42
This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00456 · Published 2023-01-26 · No fix listed CWE-787
Priority MEDIUM 41
PDF-XChange Editor U3D File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00577 · Published 2025-02-11 · No fix listed CWE-787
Priority MEDIUM 41
PDF-XChange Editor RTF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00595 · Published 2025-02-11 · No fix listed CWE-122
Priority MEDIUM 41
PDF-XChange Editor Doc Object Out-Of-Bounds Read Remote Code Execution Vulnerability.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00577 · Published 2025-02-11 · No fix listed CWE-125
Priority MEDIUM 41
PDF-XChange Editor AcroForm Use-After-Free Remote Code Execution Vulnerability.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00607 · Published 2025-02-11 · No fix listed CWE-416
Priority LOW 39
PDF-XChange Editor U3D File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00512 · Published 2025-02-11 · No fix listed CWE-125
Priority LOW 39
PDF-XChange Editor XPS File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00512 · Published 2025-02-11 · No fix listed CWE-125
Priority LOW 39
PDF-XChange Editor U3D File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00633 · Published 2025-02-11 · No fix listed CWE-125
Priority LOW 39
PDF-XChange Editor JB2 File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00512 · Published 2025-02-11 · No fix listed CWE-125
Priority LOW 39
PDF-XChange Editor JB2 File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00512 · Published 2025-02-11 · No fix listed CWE-125
Priority LOW 39
PDF-XChange Editor JB2 File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00512 · Published 2025-02-11 · No fix listed CWE-125
Priority LOW 39
PDF-XChange Editor XPS File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00512 · Published 2025-02-11 · No fix listed CWE-125
Priority LOW 39
PDF-XChange Editor XPS File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00512 · Published 2025-02-11 · No fix listed CWE-125
Priority LOW 38
Tracker PDF-XChange Editor before 8.0.330.0 has an NTLM SSO hash theft vulnerability using crafted FDF or XFDF files (a related issue to CVE-2018-4993).
CVSS 3.1MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.06291 · Published 2019-10-10 · No fix listed CWE-522
Priority LOW 37
PDF-XChange Editor EMF File Parsing Use-After-Free Remote Code Execution Vulnerability.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00473 · Published 2024-05-03 · No fix listed CWE-416
Priority LOW 37
PDF-XChange Editor EMF File Parsing Use-After-Free Remote Code Execution Vulnerability.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.0048 · Published 2024-05-03 · No fix listed CWE-416
Priority LOW 37
PDF-XChange Editor EMF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00489 · Published 2024-05-03 · No fix listed CWE-122
Priority LOW 37
PDF-XChange Editor JPG File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00489 · Published 2024-05-03 · No fix listed CWE-122
Priority LOW 37
PDF-XChange Editor EMF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00483 · Published 2024-05-03 · No fix listed CWE-122
Priority LOW 37
PDF-XChange Editor PDF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00483 · Published 2024-05-03 · No fix listed CWE-122
Priority LOW 37
PDF-XChange Editor U3D File Parsing Uninitialized Variable Remote Code Execution Vulnerability.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00473 · Published 2024-05-03 · No fix listed CWE-457
Priority LOW 37
PDF-XChange Editor U3D File Parsing Use-After-Free Remote Code Execution Vulnerability.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.0048 · Published 2024-05-03 · No fix listed CWE-416
Priority LOW 37
PDF-XChange Editor Annotation Use-After-Free Remote Code Execution Vulnerability.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00473 · Published 2024-05-03 · No fix listed CWE-416
Priority LOW 37
PDF-XChange Editor mailForm Use-After-Free Code Execution Vulnerability.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.0048 · Published 2024-05-03 · No fix listed CWE-416
Priority LOW 37
PDF-XChange Editor createDataObject Directory Traversal Remote Code Execution Vulnerability.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00734 · Published 2024-05-03 · No fix listed CWE-22
Load more