Enhanced
Monthly
Local privilege escalation in PDFsam Enhanced 7.0.76.15222 allows a physically-present attacker to obtain code execution as SYSTEM by planting a malicious OpenSSL configuration file. The product loads its OpenSSL config from an unsecured location (CWE-427, uncontrolled search path element), so an attacker who can mount an attacker-controlled drive onto the Windows host can hijack the config load. Exploitation requires physical access and drive-mounting capability, no network vector exists, and EPSS is low (0.33%, 25th percentile) with no public exploit or KEV entry identified at time of analysis.
Arbitrary code execution in PDFsam Enhanced 7.0.76.15222 occurs when a user opens a crafted XLS file containing dangerous embedded script, because the application executes that content without showing the unsafe-action warning it should (CWE-356). The attack is client-side and gated by mandatory user interaction - the victim must open the malicious spreadsheet or visit a page that delivers it - and any code runs only with the current user's privileges, with no scope change or privilege escalation. No public exploit code was identified at time of analysis and the issue is not listed in CISA KEV; high attack complexity (AC:H) means a crafted file must satisfy specific conditions to execute reliably.
Remote code execution in PDFsam Enhanced 7.0.76.15222 is caused by the application's Launch action executing dangerous script without any user warning (CWE-356). An unauthenticated attacker can trigger the flaw by convincing a victim to open a crafted PDF or visit a malicious page, after which code runs with the victim's privileges; user interaction is required and no public exploit was identified at time of analysis.
PDFsam Enhanced 7.0.76.15222 can execute dangerous embedded script from a crafted DOC file without displaying a user warning, leading to code execution in the context of the current user. Exploitation requires local access (AV:L), no privileges (PR:N), and user interaction (UI:R); no public exploit code or KEV entry was identified at time of analysis, making this a moderate, user-gated risk.
Out-of-bounds read in PDFsam Enhanced's handling of App objects can lead to arbitrary code execution when a victim opens a crafted PDF containing malformed content. PDFsam Enhanced 7.0.76.15222 is confirmed affected; the CVSS 3.1 vector is AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H, so exploitation requires user interaction but no credentials or administrative rights, and code runs in the context of the user who opens the file. No public exploit code or CISA KEV entry is confirmed in the provided intelligence, and the free PDFsam Basic edition is not identified as affected.
Local privilege escalation in PDFsam Enhanced 7.0.76.15222 allows a physically-present attacker to obtain code execution as SYSTEM by planting a malicious OpenSSL configuration file. The product loads its OpenSSL config from an unsecured location (CWE-427, uncontrolled search path element), so an attacker who can mount an attacker-controlled drive onto the Windows host can hijack the config load. Exploitation requires physical access and drive-mounting capability, no network vector exists, and EPSS is low (0.33%, 25th percentile) with no public exploit or KEV entry identified at time of analysis.
Arbitrary code execution in PDFsam Enhanced 7.0.76.15222 occurs when a user opens a crafted XLS file containing dangerous embedded script, because the application executes that content without showing the unsafe-action warning it should (CWE-356). The attack is client-side and gated by mandatory user interaction - the victim must open the malicious spreadsheet or visit a page that delivers it - and any code runs only with the current user's privileges, with no scope change or privilege escalation. No public exploit code was identified at time of analysis and the issue is not listed in CISA KEV; high attack complexity (AC:H) means a crafted file must satisfy specific conditions to execute reliably.
Remote code execution in PDFsam Enhanced 7.0.76.15222 is caused by the application's Launch action executing dangerous script without any user warning (CWE-356). An unauthenticated attacker can trigger the flaw by convincing a victim to open a crafted PDF or visit a malicious page, after which code runs with the victim's privileges; user interaction is required and no public exploit was identified at time of analysis.
PDFsam Enhanced 7.0.76.15222 can execute dangerous embedded script from a crafted DOC file without displaying a user warning, leading to code execution in the context of the current user. Exploitation requires local access (AV:L), no privileges (PR:N), and user interaction (UI:R); no public exploit code or KEV entry was identified at time of analysis, making this a moderate, user-gated risk.
Out-of-bounds read in PDFsam Enhanced's handling of App objects can lead to arbitrary code execution when a victim opens a crafted PDF containing malformed content. PDFsam Enhanced 7.0.76.15222 is confirmed affected; the CVSS 3.1 vector is AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H, so exploitation requires user interaction but no credentials or administrative rights, and code runs in the context of the user who opens the file. No public exploit code or CISA KEV entry is confirmed in the provided intelligence, and the free PDFsam Basic edition is not identified as affected.