Nuance's vulnerability profile centers on document processing and voice transcription products such as PDF Reader, PDF Reader Plus, Power PDF Standard, and WinScribe Dictation, which serve enterprise and professional workflows. The observed exposure clusters around memory-safety concerns including buffer boundary violations, alongside application-layer issues such as SQL injection and cryptographic signature validation, reflecting the parsing and data-handling demands of these utility products. Current severity, exploitation status, and exposure counts are shown alongside this summary.
The number and severity of CVEs published that impact products developed by Nuance over time
Signals from CVEs in this vendor scope (5 CVEs).
5 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2013-0732HIGH Heap-based buffer overflow in PDFCore8.dll in Nuance PDF Reader before 8.1 allows remote attackers to execute arbitrary code via crafted font table directory values in a TTF file, | Mar 27, 2014 | 9.3 | 31 | NO | NO |
CVE-2021-37599CRITICAL The exporter/Login.aspx login form in the Exporter in Nuance Winscribe Dictation 4.1.0.99 is vulnerable to SQL injection that allows a remote, unauthenticated attacker to read the | Aug 12, 2021 | 9.8 | 30 | NO | NO |
CVE-2013-0113HIGH Nuance PDF Reader 7.0 and PDF Viewer Plus 7.1 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted PDF document. | Feb 24, 2013 | 9.3 | 28 | NO | NO |
CVE-2018-18688MEDIUM The Portable Document Format (PDF) specification does not provide any information regarding the concrete procedure of how to validate signatures. Consequently, an Incremental Savin | Jan 7, 2021 | 5.3 | 20 | NO | NO |
CVE-2010-5209MEDIUM Multiple untrusted search path vulnerabilities in Nuance PDF Reader 6.0 allow local users to gain privileges via a Trojan horse (1) dwmapi.dll or (2) exceptiondumpdll.dll file in t | Sep 6, 2012 | 6.9 | 20 | NO | NO |
Signals from CVEs in this vendor scope (5 CVEs).
An overview of all social media posts that mention a CVE ID that affects a product developed by Nuance.
Media articles that mention a CVE ID that affects a product developed by Nuance — matched by CVE ID, not by vendor name.