Soda PDF

Records11All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high6CVSS 7.0–8.9

Exploited now

Soda PDF records in CISA KEV

No Soda PDF vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

3 records in Soda Pdf Desktop · all components

TI-2025-13164 CVE-2025-14413 · GHSA-jqjw-9qg4-xvq2

LOW 36

Soda PDF Desktop CBZ File Parsing Directory Traversal Remote Code Execution Vulnerability.

CVSS 3.0HIGH 7.8 Local No auth User interaction EPSS 0.00449 Published 2025-12-23 No fix listed CWE-22

TI-2025-13165 CVE-2025-14414 · GHSA-vrmq-5pvh-gvw6

LOW 35

Soda PDF Desktop Word File Insufficient UI Warning Remote Code Execution Vulnerability.

CVSS 3.0HIGH 7.8 Local No auth User interaction EPSS 0.00215 Published 2025-12-23 No fix listed CWE-356

TI-2018-13212 CVE-2018-18689 · GHSA-wmqc-jfc8-pfm5

LOW 30

The Portable Document Format (PDF) specification does not provide any information regarding the concrete procedure of how to validate signatures.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.03632 Published 2021-01-07 No fix listed CWE-347