Known vulnerabilities in PDF-XChange Editor
Vendor:
PDF-XChange
Software:
PDF-XChange Editor
Software CPE:
cpe:2.3:a:pdf-xchange:pdf-xchange_editor:*:*:*:*:*:*:*:*
Website:
https://www.tracker-software.com/
Total vulnerabilities:
207
Public exploits:
0
Known exploited (KEV):
0
Highest CVSSv4 Score:
8.7
Breakdown by Severity Chart
11
10
10.6.0.396
10.5.1.394
10.5.2.395
10.7.3.401
10.4.2.390
10.5.0.393
10.4.3.391
10.4.4.392
10.4.1.389
10.4.0.388
10.3.1.387
10.3.0.386
10.1.2.382
10.1.1.381
10.1.0.380
10.0.1.371
10.0.0.370
9.5.368.0
9.5.367.0
2.5.322.4
9.5.366.0
9.5.365.0
9.4.364.0
9.4.362.0
9.3.361.0
9.3.360.0
9.2.359.0
9.2.358.0
9.2.357.0
9.1.356.0
9.1.355.0
9.0.354.0
9.0.353.0
9.0.352.0
9.0.351.0
9.0.350.0
8.0.344.0
8.0.343.0
8.0.342.0
8.0.341.0
8.0.340.0
8.0.339.0
8.0.338.0
8.0.337.0
8.0.336.0
8.0.335.0
8.0.334.0
8.0.333.0
8.0.332.0
8.0.331.0
8.0.330.0
7.0.328.2
7.0.328.1
7.0.328.0
7.0.327.1
7.0.327.0
7.0.326.1
7.0.326.0
7.0.325.1
7.0.325.0
7.0.324.3
7.0.324.2
7.0.324.1
7.0.324.0
7.0.323.2
7.0.323.1
7.0.323.0
6.0.322.7
6.0.322.6
6.0.322.5
6.0.322.4
6.0.322.3
6.0.322.0
6.0.321.0
6.0.320.1
6.0.320.0
6.0.319.0
6.0.318.1
6.0.318.0
6.0.317.1
6.0.317.0
5.5.316.1
5.5.316.0
5.5.315.0
5.5.314.0
5.5.313.0
5.5.312.1
5.5.312.0
5.5.311.0
5.5.310.0
5.5.309.0
5.5.308.2
5.5.308.1
3.0.308.0
3.0.307.2
3.0.307.1
3.0.307.0
3.0.306.1
3.0.306.0
3.0.305.0
9.4.363.0
Vulnerabilities (207)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU123105 - Unquoted Search Path or Element CVE-2026-2040 |
CWE-428 | Low | 10.7.3.401 | 20.02.2026 |
SB2026022015 |
||
| #VU119087 - Out-of-bounds read CVE-2025-58113 |
CWE-125 | Medium | - | 03.12.2025 |
SB2025120314 |
||
| #VU103501 - Out-of-bounds read CVE-2025-0902 |
CWE-125 | Medium | 10.4.2.390 | 03.02.2025 |
SB2025020328 |
||
| #VU103499 - Out-of-bounds read CVE-2025-0904 |
CWE-125 | Medium | 10.4.2.390 | 03.02.2025 |
SB2025020328 |
||
| #VU103498 - Heap-based Buffer Overflow CVE-2025-0903 |
CWE-122 | High | 10.4.2.390 | 03.02.2025 |
SB2025020328 |
||
| #VU103497 - Out-of-bounds read CVE-2025-0907 |
CWE-125 | Medium | 10.4.2.390 | 03.02.2025 |
SB2025020328 |
||
| #VU103496 - Out-of-bounds read CVE-2025-0906 |
CWE-125 | Medium | 10.4.2.390 | 03.02.2025 |
SB2025020328 |
||
| #VU103494 - Out-of-bounds read CVE-2025-0905 |
CWE-125 | Medium | 10.4.2.390 | 03.02.2025 |
SB2025020328 |
||
| #VU103493 - Out-of-bounds read CVE-2025-0911 |
CWE-125 | Medium | 10.5.0.393 | 03.02.2025 |
SB2025020316 |
||
| #VU103492 - Out-of-bounds write CVE-2025-0910 |
CWE-787 | High | 10.5.0.393 | 03.02.2025 |
SB2025020316 |
||
| #VU103491 - Out-of-bounds read CVE-2025-0909 |
CWE-125 | Medium | 10.5.0.393 | 03.02.2025 |
SB2025020316 |
||
| #VU103490 - Out-of-bounds read CVE-2025-0908 |
CWE-125 | Medium | 10.4.4.392 | 03.02.2025 |
SB2025020315 |
||
| #VU103488 - Out-of-bounds read CVE-2025-0901 |
CWE-125 | High | 10.4.1.389 | 03.02.2025 |
SB2025020314 |
||
| #VU103487 - Use After Free CVE-2025-0899 |
CWE-416 | Medium | 10.4.1.389 | 03.02.2025 |
SB2025020314 |
||
| #VU97611 - Out-of-bounds read CVE-2024-8849 |
CWE-125 | Low | 10.4.0.388 | 19.09.2024 |
SB2024091935 |
||
| #VU97610 - Out-of-bounds read CVE-2024-8848 |
CWE-125 | Low | 10.4.0.388 | 19.09.2024 |
SB2024091935 |
||
| #VU97609 - Out-of-bounds read CVE-2024-8847 |
CWE-125 | High | 10.4.0.388 | 19.09.2024 |
SB2024091935 |
||
| #VU97608 - Out-of-bounds read CVE-2024-8846 |
CWE-125 | Low | 10.4.0.388 | 19.09.2024 |
SB2024091935 |
||
| #VU97607 - Out-of-bounds read CVE-2024-8845 |
CWE-125 | Low | 10.4.0.388 | 19.09.2024 |
SB2024091935 |
||
| #VU97601 - Use of Uninitialized Variable CVE-2024-8842 |
CWE-457 | High | 10.4.0.388 | 19.09.2024 |
SB2024091935 |
Showing elements 1 - 20 out of 207