Pdftron

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2022-24960 Mar 10, 17:46 HIGH This Week

A use after free vulnerability was discovered in PDFTron SDK version 9.2.0. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Denial Of Service Use After Free Memory Corruption Microsoft Pdftron

NVD GitHub

CVSS 3.1

7.8

EPSS

0.6%

CVE-2021-39307 Sep 15, 13:15 MEDIUM POC This Month

PDFTron's WebViewer UI 8.0 or below renders dangerous URLs as hyperlinks in supported documents, including JavaScript URLs, allowing the execution of arbitrary JavaScript code. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

XSS Webviewer Ui Pdftron

NVD

CVSS 3.1

6.1

EPSS

1.1%

CVE-2022-24960

EPSS 1% CVSS 7.8

HIGH This Week

Denial Of Service Use After Free Memory Corruption +2

NVD GitHub

CVE-2021-39307

EPSS 1% CVSS 6.1

MEDIUM POC This Month

XSS Webviewer Ui Pdftron

NVD