Vulnerabilities

TI-2025-13165 CVE-2025-14414 · GHSA-vrmq-5pvh-gvw6

Soda PDF Desktop Word File Insufficient UI Warning Remote Code Execution Vulnerability

LOW 35

Soda PDF Desktop Word File Insufficient UI Warning Remote Code Execution Vulnerability.

CVSS 3.0HIGH 7.8 Local No auth User interaction EPSS 0.00215 Published 2025-12-23 No fix listed CWE-356

TI-2025-13164 CVE-2025-14413 · GHSA-jqjw-9qg4-xvq2

LOW 36

Soda PDF Desktop CBZ File Parsing Directory Traversal Remote Code Execution Vulnerability.

CVSS 3.0HIGH 7.8 Local No auth User interaction EPSS 0.00449 Published 2025-12-23 No fix listed CWE-22

TI-2018-13212 CVE-2018-18689 · GHSA-wmqc-jfc8-pfm5

LOW 30

The Portable Document Format (PDF) specification does not provide any information regarding the concrete procedure of how to validate signatures.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.03632 Published 2021-01-07 No fix listed CWE-347