Vulnerabilities

TI-2025-13166 CVE-2025-14415 · GHSA-jjw5-q7qp-42hq

Soda PDF Desktop Launch Insufficient UI Warning Remote Code Execution Vulnerability

LOW 36

Soda PDF Desktop Launch Insufficient UI Warning Remote Code Execution Vulnerability.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00254 Published 2025-12-23 No fix listed CWE-356

TI-2025-13163 CVE-2025-14412 · GHSA-jc82-7f3j-vfhx

LOW 35

Soda PDF Desktop XLS File Insufficient UI Warning Remote Code Execution Vulnerability.

CVSS 3.0HIGH 7.8 Local No auth User interaction EPSS 0.002 Published 2025-12-23 No fix listed CWE-356

TI-2025-13162 CVE-2025-14411 · GHSA-xfmc-rrpg-g7c7

LOW 24

Soda PDF Desktop PDF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00178 Published 2025-12-23 No fix listed CWE-125

TI-2025-13161 CVE-2025-14410 · GHSA-ghp5-jhjg-chxj

LOW 24

Soda PDF Desktop PDF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00178 Published 2025-12-23 No fix listed CWE-125

TI-2025-13160 CVE-2025-14409 · GHSA-cvm4-ppm7-px2p

LOW 35

Soda PDF Desktop PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability.

CVSS 3.0HIGH 7.8 Local No auth User interaction EPSS 0.00187 Published 2025-12-23 No fix listed CWE-787

TI-2025-13159 CVE-2025-14408 · GHSA-ppqv-vwjw-2qx4

LOW 15

Soda PDF Desktop PDF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability.

CVSS 3.0LOW 3.3 Local No auth User interaction EPSS 0.0017 Published 2025-12-23 No fix listed CWE-125

TI-2025-13158 CVE-2025-14407 · GHSA-hfqq-h99r-jj95

LOW 24

Soda PDF Desktop PDF File Parsing Memory Corruption Information Disclosure Vulnerability.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00179 Published 2025-12-23 No fix listed CWE-119

TI-2025-13157 CVE-2025-14406 · GHSA-78w4-pwpr-qchm

LOW 35

Soda PDF Desktop Uncontrolled Search Path Element Local Privilege Escalation Vulnerability.

CVSS 3.0HIGH 7.8 Local Low privileges No interaction EPSS 0.00164 Published 2025-12-23 No fix listed CWE-427

TI-2018-13212 CVE-2018-18689 · GHSA-wmqc-jfc8-pfm5

LOW 30

The Portable Document Format (PDF) specification does not provide any information regarding the concrete procedure of how to validate signatures.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.03632 Published 2021-01-07 No fix listed CWE-347