Vulnerabilidades em PDF-XChange

280 resultados
Análise Vexday

Com 280 CVEs catalogadas, o PDF-XChange apresenta um volume considerável de vulnerabilidades históricas, embora o cenário atual de risco operacional seja relativamente contido. A taxa de exploração ativa está abaixo da média geral do catálogo CISA KEV, sem nenhuma entrada confirmada como explorada ativamente, e a ausência de PoCs públicas conhecidas reduz a superfície de ataque imediata. O tipo de falha mais recorrente é CWE-125 (leitura fora dos limites de buffer), padrão comum em aplicações de processamento de documentos que pode facilitar vazamento de informações ou instabilidade controlada. A CVE mais perigosa identificada atualmente, CVE-2022-37351, registra EPSS de 0,0087, indicando baixa probabilidade de exploração no curto prazo, mas equipes responsáveis por ambientes que processam documentos externos devem manter o ciclo de atualização em dia dado o histórico acumulado de vulnerabilidades no produto.

CVE-2023-39495MEDIUMPDF-XChange Editor readFileIntoStream Exposed Dangerous Function Information Disclosure VulnerabilityEPSS 0.4%CVE-2024-8842HIGHPDF-XChange Editor RTF File Parsing Uninitialized Variable Remote Code Execution VulnerabilityEPSS 0.4%CVE-2022-42396HIGHThis vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is reEPSS 0.4%CVE-2023-39505MEDIUMPDF-XChange Editor Net.HTTP.requests Exposed Dangerous Function Information Disclosure VulnerabilityEPSS 0.4%CVE-2023-40470LOWPDF-XChange Editor JP2 File Parsing Out-Of-Bounds Read Information Disclosure VulnerabilityEPSS 0.4%CVE-2022-42410HIGHThis vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is reEPSS 0.4%CVE-2022-41146LOWThis vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. User interactiEPSS 0.4%CVE-2022-42381HIGHThis vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is reEPSS 0.4%CVE-2022-42382HIGHThis vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is reEPSS 0.4%CVE-2022-42375LOWThis vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. User interactiEPSS 0.4%CVE-2022-41145LOWThis vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. User interactiEPSS 0.4%CVE-2022-42389LOWThis vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. User interactiEPSS 0.4%CVE-2022-42404LOWThis vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. User interactiEPSS 0.4%CVE-2022-42380HIGHThis vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is reEPSS 0.4%CVE-2022-42385LOWThis vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. User interactiEPSS 0.4%CVE-2022-42378HIGHThis vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is reEPSS 0.4%CVE-2022-42388LOWThis vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. User interactiEPSS 0.4%CVE-2022-42379HIGHThis vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is reEPSS 0.4%CVE-2024-27331LOWPDF-XChange Editor EMF File Parsing Out-Of-Bounds Read Information Disclosure VulnerabilityEPSS 0.4%CVE-2024-27332LOWPDF-XChange Editor JPG File Parsing Out-Of-Bounds Read Information Disclosure VulnerabilityEPSS 0.4%