Vendor

Sodapdf

Products

CVEs

Across products

Status

Private

Products

Soda PDF
9 CVEs
Soda PDF Desktop
3 CVEs

Recent CVEs

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	Published	Description
CVE-2025-14415	Soda PDF Soda PDF Desktop	Hig	0.51	7.8	0.00	Dec 23, 2025	Soda PDF Desktop Launch Insufficient UI Warning Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Soda PDF Desktop. User interaction is required to exploit this vulnerability in that the target…
CVE-2025-14414	Soda PDF Soda PDF Desktop	Hig	0.51	7.8	0.00	Dec 23, 2025	Soda PDF Desktop Word File Insufficient UI Warning Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Soda PDF Desktop. User interaction is required to exploit this vulnerability in that the…
CVE-2025-14413	Soda PDF Soda PDF Desktop	Hig	0.51	7.8	0.00	Dec 23, 2025	Soda PDF Desktop CBZ File Parsing Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Soda PDF Desktop. User interaction is required to exploit this vulnerability in that the…
CVE-2025-14412	Soda PDF Soda PDF Desktop	Hig	0.51	7.8	0.00	Dec 23, 2025	Soda PDF Desktop XLS File Insufficient UI Warning Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Soda PDF Desktop. User interaction is required to exploit this vulnerability in that the…
CVE-2025-14409	Soda PDF Soda PDF Desktop	Hig	0.51	7.8	0.00	Dec 23, 2025	Soda PDF Desktop PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Soda PDF Desktop. User interaction is required to exploit this vulnerability in that the…
CVE-2025-14406	Soda PDF Soda PDF Desktop	Hig	0.51	7.8	0.00	Dec 23, 2025	Soda PDF Desktop Uncontrolled Search Path Element Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Soda PDF Desktop. An attacker must first obtain the ability to execute low-privileged code on…
CVE-2025-14411	Soda PDF Soda PDF Desktop	Med	0.36	5.5	0.00	Dec 23, 2025	Soda PDF Desktop PDF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Soda PDF Desktop. User interaction is required to exploit this vulnerability in…
CVE-2025-14410	Soda PDF Soda PDF Desktop	Med	0.36	5.5	0.00	Dec 23, 2025	Soda PDF Desktop PDF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Soda PDF Desktop. User interaction is required to exploit this vulnerability in…
CVE-2025-14407	Soda PDF Soda PDF Desktop	Med	0.36	5.5	0.00	Dec 23, 2025	Soda PDF Desktop PDF File Parsing Memory Corruption Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Soda PDF Desktop. User interaction is required to exploit this vulnerability in…
CVE-2018-18689	Foxitsoftware Reader	Med	0.35	5.3	0.04	Jan 7, 2021	The Portable Document Format (PDF) specification does not provide any information regarding the concrete procedure of how to validate signatures. Consequently, a Signature Wrapping vulnerability exists in multiple products. An attacker can use /ByteRange and xref manipulations…
CVE-2025-14408	Soda PDF Soda PDF Desktop	Low	0.21	3.3	0.00	Dec 23, 2025	Soda PDF Desktop PDF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Soda PDF Desktop. User interaction is required to exploit this vulnerability in…

CVE-2025-14415HigDec 23, 2025
Soda PDF
Soda PDF Desktop
risk 0.51cvss 7.8epss 0.00
Soda PDF Desktop Launch Insufficient UI Warning Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Soda PDF Desktop. User interaction is required to exploit this vulnerability in that the target…
CVE-2025-14414HigDec 23, 2025
Soda PDF
Soda PDF Desktop
risk 0.51cvss 7.8epss 0.00
Soda PDF Desktop Word File Insufficient UI Warning Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Soda PDF Desktop. User interaction is required to exploit this vulnerability in that the…
CVE-2025-14413HigDec 23, 2025
Soda PDF
Soda PDF Desktop
risk 0.51cvss 7.8epss 0.00
Soda PDF Desktop CBZ File Parsing Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Soda PDF Desktop. User interaction is required to exploit this vulnerability in that the…
CVE-2025-14412HigDec 23, 2025
Soda PDF
Soda PDF Desktop
risk 0.51cvss 7.8epss 0.00
Soda PDF Desktop XLS File Insufficient UI Warning Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Soda PDF Desktop. User interaction is required to exploit this vulnerability in that the…
CVE-2025-14409HigDec 23, 2025
Soda PDF
Soda PDF Desktop
risk 0.51cvss 7.8epss 0.00
Soda PDF Desktop PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Soda PDF Desktop. User interaction is required to exploit this vulnerability in that the…
CVE-2025-14406HigDec 23, 2025
Soda PDF
Soda PDF Desktop
risk 0.51cvss 7.8epss 0.00
Soda PDF Desktop Uncontrolled Search Path Element Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Soda PDF Desktop. An attacker must first obtain the ability to execute low-privileged code on…
CVE-2025-14411MedDec 23, 2025
Soda PDF
Soda PDF Desktop
risk 0.36cvss 5.5epss 0.00
Soda PDF Desktop PDF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Soda PDF Desktop. User interaction is required to exploit this vulnerability in…
CVE-2025-14410MedDec 23, 2025
Soda PDF
Soda PDF Desktop
risk 0.36cvss 5.5epss 0.00
Soda PDF Desktop PDF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Soda PDF Desktop. User interaction is required to exploit this vulnerability in…
CVE-2025-14407MedDec 23, 2025
Soda PDF
Soda PDF Desktop
risk 0.36cvss 5.5epss 0.00
Soda PDF Desktop PDF File Parsing Memory Corruption Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Soda PDF Desktop. User interaction is required to exploit this vulnerability in…
CVE-2018-18689MedJan 7, 2021
Foxitsoftware
Reader
risk 0.35cvss 5.3epss 0.04
The Portable Document Format (PDF) specification does not provide any information regarding the concrete procedure of how to validate signatures. Consequently, a Signature Wrapping vulnerability exists in multiple products. An attacker can use /ByteRange and xref manipulations…
CVE-2025-14408LowDec 23, 2025
Soda PDF
Soda PDF Desktop
risk 0.21cvss 3.3epss 0.00
Soda PDF Desktop PDF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Soda PDF Desktop. User interaction is required to exploit this vulnerability in…