Records11All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high6CVSS 7.0–8.9
Exploited now
Soda PDF records in CISA KEVNo Soda PDF vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsPriority LOW 36
Soda PDF Desktop Launch Insufficient UI Warning Remote Code Execution Vulnerability.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00254 · Published 2025-12-23 · No fix listed CWE-356
Priority LOW 36
Soda PDF Desktop CBZ File Parsing Directory Traversal Remote Code Execution Vulnerability.
CVSS 3.0HIGH 7.8· Local · No auth · User interaction · EPSS 0.00449 · Published 2025-12-23 · No fix listed CWE-22
Priority LOW 35
Soda PDF Desktop Word File Insufficient UI Warning Remote Code Execution Vulnerability.
CVSS 3.0HIGH 7.8· Local · No auth · User interaction · EPSS 0.00215 · Published 2025-12-23 · No fix listed CWE-356
Priority LOW 35
Soda PDF Desktop XLS File Insufficient UI Warning Remote Code Execution Vulnerability.
CVSS 3.0HIGH 7.8· Local · No auth · User interaction · EPSS 0.002 · Published 2025-12-23 · No fix listed CWE-356
Priority LOW 35
Soda PDF Desktop PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability.
CVSS 3.0HIGH 7.8· Local · No auth · User interaction · EPSS 0.00187 · Published 2025-12-23 · No fix listed CWE-787
Priority LOW 35
Soda PDF Desktop Uncontrolled Search Path Element Local Privilege Escalation Vulnerability.
CVSS 3.0HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00164 · Published 2025-12-23 · No fix listed CWE-427
Priority LOW 30
The Portable Document Format (PDF) specification does not provide any information regarding the concrete procedure of how to validate signatures.
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.03632 · Published 2021-01-07 · No fix listed CWE-347
Priority LOW 24
Soda PDF Desktop PDF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability.
CVSS 3.1MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.00178 · Published 2025-12-23 · No fix listed CWE-125
Priority LOW 24
Soda PDF Desktop PDF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability.
CVSS 3.1MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.00178 · Published 2025-12-23 · No fix listed CWE-125
Priority LOW 24
Soda PDF Desktop PDF File Parsing Memory Corruption Information Disclosure Vulnerability.
CVSS 3.1MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.00179 · Published 2025-12-23 · No fix listed CWE-119
Priority LOW 15
Soda PDF Desktop PDF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability.
CVSS 3.0LOW 3.3· Local · No auth · User interaction · EPSS 0.0017 · Published 2025-12-23 · No fix listed CWE-125
Open these records in search →