CVE-2026-113251

Use after free in PDF in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Low...

CVE-2026-113026

Memory corruption in PDF in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-113212

Memory corruption in PDF in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially via a crafted HTML page. Chromium security severity: High...

GHSA-P4WG-P73J-C528 Pillow: Unbounded recursion parsing a PDF page tree or trailer chain (incomplete fix for CVE-2026-42310)

Summary When an application appends to an existing PDF with Image.save..., format="PDF", append=True, Pillow parses that file with PdfParser. Two recursive parsers have no effective bound. linearizepagetree follows /Kids with no visited set or depth limit, so a cyclic or duplicated page tree...

EUVD-2026-104657

Pillow: Unbounded recursion parsing a PDF page tree or trailer chain incomplete fix for CVE-2026-42310...

CVE-2015-20125

The Aspose PDF Exporter plugin for WordPress (versions before 2.0 ) is vulnerable to a path traversal vulnerability. The flaw exists in the aspose_pdf_exporter_download.php file because the file parameter is passed to the readfile() function without proper sanitization. Unauthenticated attackers ...

CVE-2026-112406

A flaw was found in Pillow. This vulnerability allows a remote attacker to cause a Denial of Service DoS through an infinite loop during PDF page processing. When rewriting pages, the parser fails to detect circular references in the page tree hierarchy. By submitting a specially crafted PDF...

CVE-2019-13288

Xpdf version 4.02 2019-sep-25 The Xpdf software and documentation are copyright 1996-2019 Glyph & Cog, LLC. Email: [email protected] WWW: http://www.xpdfreader.com/ The PDF data structures, operators, and specification are documented in ISO 32000-2:2017. What is Xpdf? Xpdf is an open source...

PS-2017-13---CVE-2018-9950

Foxit Reader PDF Parsing Out-Of-Bounds Read Information Disclosure Vulnerability Vulnerability Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability Vulnerability Description This vulnerability allows remote attackers to disclose sensitive information on vulnerable...

CVE-2026-61797

CVE-2026-61797 — GLPI PDF Plugin Time-Based Blind SQL Injection Proof of Concept for CVE-2026-61797 , a time-based blind SQL Injection vulnerability affecting the GLPI PDF plugin. The vulnerability can be reached through: /marketplace/pdf/front/preference.form.php In the vulnerable implementation...

CVE-2026-113643

A vulnerability exists in EspoCRM versions up to 9.3.10/10.0.10 within the PDF Rendering Pipeline component. Specifically, the ImageSourceProvider::get function in the file application/Espo/Tools/Pdf/Dompdf/ImageSourceProvider.php fails to properly validate the ID argument. This flaw allows for a...

CVE-2026-113643 EspoCRM PDF Rendering Pipeline ImageSourceProvider.php get authorization

A vulnerability was found in EspoCRM up to 9.3.10/10.0.10. This affects the function ImageSourceProvider::get of the file application/Espo/Tools/Pdf/Dompdf/ImageSourceProvider.php of the component PDF Rendering Pipeline. Performing a manipulation of the argument ID results in authorization bypass...

malicious-pdf

Malicious PDF Generator ☠️ Generate 67 malicious PDF test files for testing phone-home callbacks, SSRF, XSS, XXE, NTLM credential theft, and data exfiltration in PDF viewers, converters, and web applications. Can be used with Burp Collaborator or Interact.sh Used for penetration testing, bug bount...

dangerzone

Dangerzone Take potentially dangerous PDFs, office documents, or images and convert them to a safe PDF. | ---|--- Dangerzone works like this: You give it a document that you don't know if you can trust for example, an email attachment. Inside of a sandbox, Dangerzone converts the document to a PD...

CVE-2026-113606

Stirling-PDF 3.0.0 through 3.2.0 contains an authorization bypass vulnerability that allows authenticated users to access other users' stored files by pointing a processing folder at the server storage directory. Attackers can create a folder via POST /api/v1/processing-folders targeting storage/...

CVE-2026-113605

Stirling-PDF from 2.13.2 through 3.2.0 contains an incomplete denylist in DatabaseService.validateSqlContent that allows administrators to bypass H2 import restrictions using CREATE OR REPLACE ALIAS. Authenticated administrators can upload a crafted SQL backup to the import-database endpoint, whe...

CVE-2026-113605

Stirling-PDF versions 2.13.2 through 3.2.0 are vulnerable to an H2 SQL Denylist Bypass within the DatabaseService.validateSqlContent() function. Due to an incomplete denylist, authenticated administrators can use the import-database endpoint to upload a crafted SQL backup. By utilizing CREATE OR ...

CVE-2026-113605 Stirling-PDF 2.13.2 through 3.2.0 H2 SQL Denylist Bypass via import-database

Stirling-PDF from 2.13.2 through 3.2.0 contains an incomplete denylist in DatabaseService.validateSqlContent that allows administrators to bypass H2 import restrictions using CREATE OR REPLACE ALIAS. Authenticated administrators can upload a crafted SQL backup to the import-database endpoint, whe...

EUVD-2026-105083

Stirling-PDF from 2.13.2 through 3.2.0 contains an incomplete denylist in DatabaseService.validateSqlContent that allows administrators to bypass H2 import restrictions using CREATE OR REPLACE ALIAS. Authenticated administrators can upload a crafted SQL backup to the import-database endpoint, whe...

EUVD-2026-105084

Stirling-PDF 3.0.0 through 3.2.0 contains an authorization bypass vulnerability that allows authenticated users to access other users' stored files by pointing a processing folder at the server storage directory. Attackers can create a folder via POST /api/v1/processing-folders targeting storage/...