ZDI-CAN-28570
HIGH 7.8
Overdue
Nov 27, 2025
pdfforge
PDFforge is a software company known for PDF creation and editing tools. This high-severity vulnerability requires local access and user interaction to exploit, but once successful grants an attacker complete control over confidentiality, integrity, and availability of the affected system. Security teams should monitor for exploitation attempts targeting PDFforge products and prepare for a patch deployment window between now and the March 2026 vendor deadline.
Advisory Details
Researcher
Discovered by:
soiax
Reported
November 27, 2025
Deadline
March 27, 2026
21d overdue
CVSS Vector
AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H