CVE-2022-37360

CVE-2022-37360 is a sensitive information disclosure vulnerability affecting PDF-XChange Editor, specifically within its EMF file parsing. An attacker could exploit a read past the end of a buffer by tricking a user into opening a malicious EMF file or visiting a malicious page. Rated Medium (CVSS 5.5), this vulnerability requires user interaction and local access, but could lead to sensitive information disclosure and, when chained with other vulnerabilities, arbitrary code execution. There is currently no evidence of active exploitation, public exploit code, or significant community discussion surrounding this CVE.