ZDI-CAN-28673
HIGH 7.8
Upcoming
Jan 27, 2026
pdfforge
pdfforge is a vendor known for PDF manipulation and conversion software tools. This is a high-severity local vulnerability requiring user interaction that could allow an attacker with no special privileges to achieve complete compromise including confidentiality, integrity, and availability impacts. Security teams should monitor for exploitation attempts targeting pdfforge users and prepare patches for deployment once the vendor's May 2026 deadline passes.
Advisory Details
Researcher
Discovered by:
soiax
Reported
January 27, 2026
Deadline
May 27, 2026
40d
CVSS Vector
AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H