Vulnerabilities in PDF-XChange

280 results
Vexday analysis

Com 280 CVEs catalogadas, o PDF-XChange apresenta um volume considerável de vulnerabilidades históricas, embora o cenário atual de risco operacional seja relativamente contido. A taxa de exploração ativa está abaixo da média geral do catálogo CISA KEV, sem nenhuma entrada confirmada como explorada ativamente, e a ausência de PoCs públicas conhecidas reduz a superfície de ataque imediata. O tipo de falha mais recorrente é CWE-125 (leitura fora dos limites de buffer), padrão comum em aplicações de processamento de documentos que pode facilitar vazamento de informações ou instabilidade controlada. A CVE mais perigosa identificada atualmente, CVE-2022-37351, registra EPSS de 0,0087, indicando baixa probabilidade de exploração no curto prazo, mas equipes responsáveis por ambientes que processam documentos externos devem manter o ciclo de atualização em dia dado o histórico acumulado de vulnerabilidades no produto.

CVE-2023-42059HIGHPDF-XChange Editor U3D File Parsing Use-After-Free Remote Code Execution VulnerabilityEPSS 0.5%CVE-2023-42040HIGHPDF-XChange Editor mailForm Use-After-Free Code Execution VulnerabilityEPSS 0.5%CVE-2023-39485HIGHPDF-XChange Editor JP2 File Parsing Out-Of-Bounds Write Remote Code Execution VulnerabilityEPSS 0.5%CVE-2023-42062HIGHPDF-XChange Editor U3D File Parsing Uninitialized Variable Remote Code Execution VulnerabilityEPSS 0.5%CVE-2023-42041HIGHPDF-XChange Editor Annotation Use-After-Free Remote Code Execution VulnerabilityEPSS 0.5%CVE-2023-42069HIGHPDF-XChange Editor PDF File Parsing Stack-based Buffer Overflow Remote Code Execution VulnerabilityEPSS 0.5%CVE-2023-42056LOWPDF-XChange Editor U3D File Parsing Uninitialized Variable Information Disclosure VulnerabilityEPSS 0.5%CVE-2023-39483LOWPDF-XChange Editor J2K File Parsing Out-Of-Bounds Read Information Disclosure VulnerabilityEPSS 0.5%CVE-2023-42075HIGHPDF-XChange Editor JPG File Parsing Use-After-Free Remote Code Execution VulnerabilityEPSS 0.5%CVE-2023-42082HIGHPDF-XChange Editor JPG File Parsing Use-After-Free Remote Code Execution VulnerabilityEPSS 0.5%CVE-2023-42080HIGHPDF-XChange Editor EMF File Parsing Use-After-Free Remote Code Execution VulnerabilityEPSS 0.5%CVE-2023-42050LOWPDF-XChange Editor EMF File Parsing Use-After-Free Information Disclosure VulnerabilityEPSS 0.5%CVE-2023-42046LOWPDF-XChange Editor J2K File Parsing Uninitialized Variable Information Disclosure VulnerabilityEPSS 0.5%CVE-2023-42058HIGHPDF-XChange Editor U3D File Parsing Out-Of-Bounds Read Remote Code Execution VulnerabilityEPSS 0.5%CVE-2023-42088HIGHPDF-XChange Editor JPG File Parsing Out-Of-Bounds Read Remote Code Execution VulnerabilityEPSS 0.5%CVE-2023-42055HIGHPDF-XChange Editor U3D File Parsing Out-Of-Bounds Read Remote Code Execution VulnerabilityEPSS 0.4%CVE-2023-42042HIGHPDF-XChange Editor App Object Out-Of-Bounds Read Remote Code Execution VulnerabilityEPSS 0.4%CVE-2023-42057HIGHPDF-XChange Editor U3D File Parsing Out-Of-Bounds Read Remote Code Execution VulnerabilityEPSS 0.4%CVE-2023-42063HIGHPDF-XChange Editor U3D File Parsing Out-Of-Bounds Read Remote Code Execution VulnerabilityEPSS 0.4%CVE-2023-42064HIGHPDF-XChange Editor U3D File Parsing Out-Of-Bounds Read Remote Code Execution VulnerabilityEPSS 0.4%