Priority LOW 35
Soda PDF Desktop Word File Insufficient UI Warning Remote Code Execution Vulnerability.
CVSS 3.0HIGH 7.8· Local · No auth · User interaction · EPSS 0.00215 · Published 2025-12-23 · No fix listed CWE-356
Priority LOW 36
Soda PDF Desktop Launch Insufficient UI Warning Remote Code Execution Vulnerability.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00254 · Published 2025-12-23 · No fix listed CWE-356
Priority LOW 36
Soda PDF Desktop CBZ File Parsing Directory Traversal Remote Code Execution Vulnerability.
CVSS 3.0HIGH 7.8· Local · No auth · User interaction · EPSS 0.00449 · Published 2025-12-23 · No fix listed CWE-22
Priority LOW 35
Soda PDF Desktop XLS File Insufficient UI Warning Remote Code Execution Vulnerability.
CVSS 3.0HIGH 7.8· Local · No auth · User interaction · EPSS 0.002 · Published 2025-12-23 · No fix listed CWE-356
Priority LOW 24
Soda PDF Desktop PDF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability.
CVSS 3.1MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.00178 · Published 2025-12-23 · No fix listed CWE-125
Priority LOW 24
Soda PDF Desktop PDF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability.
CVSS 3.1MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.00178 · Published 2025-12-23 · No fix listed CWE-125
Priority LOW 35
Soda PDF Desktop PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability.
CVSS 3.0HIGH 7.8· Local · No auth · User interaction · EPSS 0.00187 · Published 2025-12-23 · No fix listed CWE-787
Priority LOW 15
Soda PDF Desktop PDF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability.
CVSS 3.0LOW 3.3· Local · No auth · User interaction · EPSS 0.0017 · Published 2025-12-23 · No fix listed CWE-125
Priority LOW 24
Soda PDF Desktop PDF File Parsing Memory Corruption Information Disclosure Vulnerability.
CVSS 3.1MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.00179 · Published 2025-12-23 · No fix listed CWE-119
Priority LOW 35
Soda PDF Desktop Uncontrolled Search Path Element Local Privilege Escalation Vulnerability.
CVSS 3.0HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00164 · Published 2025-12-23 · No fix listed CWE-427
Priority LOW 30
The Portable Document Format (PDF) specification does not provide any information regarding the concrete procedure of how to validate signatures.
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.03632 · Published 2021-01-07 · No fix listed CWE-347