ZDI-CAN-28570 HIGH 7.8 Overdue Nov 27, 2025

pdfforge

PDFforge is a software company known for PDF creation and editing tools. This high-severity vulnerability requires local access and user interaction to exploit, but once successful grants an attacker complete control over confidentiality, integrity, and availability of the affected system. Security teams should monitor for exploitation attempts targeting PDFforge products and prepare for a patch deployment window between now and the March 2026 vendor deadline.

Advisory Details
Researcher Discovered by: soiax
Reported November 27, 2025
Deadline March 27, 2026 21d overdue
CVSS Vector AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy