Design/Logic Flaw

This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

CVE-2022-42408

This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

CVE-2022-42408

CVE-2022-42408 affects PDF-XChange Editor via EMF file parsing, caused by not validating object existence before operations, enabling information disclosure and potential code execution when combined with other vulnerabilities. Exploitation requires user interaction (user opens a malicious file/p...