PDF-XChange vulnerabilities

By year

Bars are flaws published each year; the red part is the share attackers have used.

Latest high and critical flaws

• CVE-2026-2040 PDF-XChange Editor TrackerUpdate Uncontrolled Search Path Element Local Privilege Escalation Vulnerability.High 7.3 · Feb 20, 2026
• CVE-2025-64086 A NULL pointer dereference vulnerability in the util.readFileIntoStream component of PDF-XChange Editor v10.7.3.401 allows attackers to cause a Denial of ServicHigh 7.5 · Dec 9, 2025
• CVE-2025-64085 A NULL pointer dereference vulnerability in the importDataObject() function of PDF-XChange Editor v10.7.3.401 allows attackers to cause a Denial of Service (DoSHigh 7.5 · Dec 9, 2025
• CVE-2025-6661 PDF-XChange Editor App Object Use-After-Free Remote Code Execution Vulnerability.High 7.8 · Jun 25, 2025
• CVE-2025-6660 PDF-XChange Editor GIF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability.High 7.8 · Jun 25, 2025
• CVE-2025-6659 PDF-XChange Editor PRC File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability.High 7.8 · Jun 25, 2025
• CVE-2025-6654 PDF-XChange Editor PRC File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability.High 7.8 · Jun 25, 2025
• CVE-2025-6651 PDF-XChange Editor JP2 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability.High 7.8 · Jun 25, 2025
• CVE-2025-6647 PDF-XChange Editor U3D File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability.High 7.8 · Jun 25, 2025
• CVE-2025-6645 PDF-XChange Editor U3D File Parsing Use-After-Free Remote Code Execution Vulnerability.High 7.8 · Jun 25, 2025
• CVE-2025-6644 PDF-XChange Editor U3D File Parsing Use-After-Free Remote Code Execution Vulnerability.High 7.8 · Jun 25, 2025
• CVE-2025-6642 PDF-XChange Editor U3D File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability.High 7.8 · Jun 25, 2025
• CVE-2025-6640 PDF-XChange Editor U3D File Parsing Use-After-Free Remote Code Execution Vulnerability.High 7.8 · Jun 25, 2025
• CVE-2025-2231 PDF-XChange Editor RTF File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability.High 7.8 · Mar 24, 2025
• CVE-2025-0911 PDF-XChange Editor U3D File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability.High 8.8 · Feb 11, 2025
• CVE-2025-0910 PDF-XChange Editor U3D File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability.High 8.8 · Feb 11, 2025
• CVE-2025-0909 PDF-XChange Editor XPS File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability.High 8.8 · Feb 11, 2025
• CVE-2025-0908 PDF-XChange Editor U3D File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability.High 8.8 · Feb 11, 2025
• CVE-2025-0907 PDF-XChange Editor JB2 File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability.High 8.8 · Feb 11, 2025
• CVE-2025-0906 PDF-XChange Editor JB2 File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability.High 8.8 · Feb 11, 2025
• CVE-2025-0905 PDF-XChange Editor JB2 File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability.High 8.8 · Feb 11, 2025
• CVE-2025-0904 PDF-XChange Editor XPS File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability.High 8.8 · Feb 11, 2025
• CVE-2025-0903 PDF-XChange Editor RTF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability.High 8.8 · Feb 11, 2025
• CVE-2025-0902 PDF-XChange Editor XPS File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability.High 8.8 · Feb 11, 2025
• CVE-2025-0901 PDF-XChange Editor Doc Object Out-Of-Bounds Read Remote Code Execution Vulnerability.High 8.8 · Feb 11, 2025