CVE-2025-14413 Soda PDF Desktop CBZ File Parsing Directory Traversal Remote Code Execution Vulnerability

Soda PDF Desktop CBZ File Parsing Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Soda PDF Desktop. User interaction is required to exploit this vulnerability in that the target must visit a...

CVE-2025-14412

CVE-2025-14412 affects Soda PDF Desktop. The vulnerability arises from how XLS files are processed, allowing the execution of dangerous scripts without user warnings. An attacker can abuse this to achieve remote code execution in the attacker’s current user context when a user opens a malicious X...

CVE-2025-14411

CVE-2025-14411 affects Soda PDF Desktop. A parsing flaw in PDF handling allows an out-of-bounds read due to insufficient validation of input data, leading to information disclosure. Exploitation requires user interaction (target must open a malicious page/file). The flaw is described as enabling ...

CVE-2025-14410 Soda PDF Desktop PDF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

Soda PDF Desktop PDF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Soda PDF Desktop. User interaction is required to exploit this vulnerability in that the target must...

CVE-2025-14409 Soda PDF Desktop PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

Soda PDF Desktop PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Soda PDF Desktop. User interaction is required to exploit this vulnerability in that the target must visit a...

CVE-2025-14408 Soda PDF Desktop PDF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

Soda PDF Desktop PDF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Soda PDF Desktop. User interaction is required to exploit this vulnerability in that the target must...

CVE-2025-14408

CVE-2025-14408 affects Soda PDF Desktop. The flaw is in the PDF parser, caused by insufficient validation of user-supplied data, leading to a read past the end of an allocated object and potential information disclosure. Exploitation requires user interaction (visiting a malicious page or opening...

CVE-2025-14407

Summary (CVE-2025-14407) : The issue affects Soda PDF Desktop’s PDF file parsing. It is described as a memory corruption vulnerability caused by inadequate validation of user-supplied data during PDF parsing, which can lead to information disclosure and, in combination with other vulnerabilities,...

CVE-2025-14407 Soda PDF Desktop PDF File Parsing Memory Corruption Information Disclosure Vulnerability

Soda PDF Desktop PDF File Parsing Memory Corruption Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Soda PDF Desktop. User interaction is required to exploit this vulnerability in that the target must...

CVE-2025-14421 pdfforge PDF Architect PDF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

pdfforge PDF Architect PDF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of pdfforge PDF Architect. User interaction is required to exploit this vulnerability in that the...

CVE-2025-14421

pdfforge PDF Architect is affected by a PDF parsing out-of-bounds read information disclosure vulnerability (CVE-2025-14421). The flaw arises from insufficient validation of user-supplied data during PDF parsing, allowing reading past the end of an allocated object. Exploitation requires user int...

CVE-2025-14420

pdfforge PDF Architect is affected by a CBZ file parsing directory traversal vulnerability that leads to Remote Code Execution. The flaw arises from insufficient validation of a user-supplied path before file operations, allowing an attacker to execute code in the context of the current user afte...

CVE-2025-14420 pdfforge PDF Architect CBZ File Parsing Directory Traversal Remote Code Execution Vulnerability

pdfforge PDF Architect CBZ File Parsing Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of pdfforge PDF Architect. User interaction is required to exploit this vulnerability in that the target...

CVE-2025-14420 pdfforge PDF Architect CBZ File Parsing Directory Traversal Remote Code Execution Vulnerability

pdfforge PDF Architect CBZ File Parsing Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of pdfforge PDF Architect. User interaction is required to exploit this vulnerability in that the target...

CVE-2025-14419 pdfforge PDF Architect PDF File Parsing Memory Corruption Remote Code Execution Vulnerability

pdfforge PDF Architect PDF File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of pdfforge PDF Architect. User interaction is required to exploit this vulnerability in that the target mu...

CVE-2025-14419

The CVE-2025-14419 issue affects pdfforge PDF Architect and is due to improper validation during PDF file parsing, causing memory corruption and potential remote code execution. Exploitation requires user interaction (visit a malicious page or open a malicious file). The vulnerability is confirme...

CVE-2025-14418 pdfforge PDF Architect XLS File Insufficient UI Warning Remote Code Execution Vulnerability

pdfforge PDF Architect XLS File Insufficient UI Warning Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of pdfforge PDF Architect. User interaction is required to exploit this vulnerability in that the target must...

CVE-2025-14418

pdfforge PDF Architect is affected by a vulnerability in XLS file processing that allows remote code execution when a user opens a malicious file or visits a malicious page. The flaw stems from executing dangerous scripts without sufficient UI warnings, enabling code execution under the current u...

CVE-2025-14417 pdfforge PDF Architect Launch Insufficient UI Warning Remote Code Execution Vulnerability

pdfforge PDF Architect Launch Insufficient UI Warning Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of pdfforge PDF Architect. User interaction is required to exploit this vulnerability in that the target must...

CVE-2025-14417

The CVE-2025-14417 vulnerability affects pdfforge PDF Architect, specifically the Launch action. The issue allows remote code execution when a user visits a crafted page or opens a malicious file, due to executing dangerous scripts without a user warning. The attack requires user interaction and ...