Pdf Tools
Vendor:
First CVE: Apr 1, 2024 · Active for 2 years
172
Total CVEs
More Total CVEs than 99% of tracked products
86.0
Avg CVEs / Year
Higher CVE frequency than 100% of tracked products
6.5
Avg CVSS
Higher Avg CVSS than 36% of tracked products
0.0%
KEV Rate
Bottom 1%
Trends Over Time
The number and severity of CVEs published that impact Pdf Tools over time
Volume of CVEsAvg CVSS Base Score
First CVE
Apr 1, 2024
2 years ago
Most Recent CVE
Jun 25, 2025
398 days ago
CVE Severity & Scoring
Pdf Tools172 CVEs
10%
35%
55%
All CVEs353,173 CVEs
45%
40%
11%
LowMediumHigh
Attack Vector
Local171 (99.4%)
Network0 (0.0%)
Unknown0 (0.0%)
Physical0 (0.0%)
Adjacent Network1 (0.6%)
Attack Complexity
Low171 (99.4%)
High1 (0.6%)
Unknown0 (0.0%)
User Interaction
None1 (0.6%)
Unknown0 (0.0%)
Required171 (99.4%)
Privileges Required
Low0 (0.0%)
High0 (0.0%)
None172 (100.0%)
Unknown0 (0.0%)
Top CVEs
Signals from CVEs in this product scope (172 CVEs).
172 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2023-27348HIGH PDF-XChange Editor TIF File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installatio | May 3, 2024 | 7.8 | 24 | NO | NO |
CVE-2025-6660HIGH PDF-XChange Editor GIF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected | Jun 25, 2025 | 7.8 | 23 | NO | NO |
CVE-2025-2231HIGH PDF-XChange Editor RTF File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected install | Mar 24, 2025 | 7.8 | 23 | NO | NO |
CVE-2023-42057HIGH PDF-XChange Editor U3D File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected install | May 3, 2024 | 7.8 | 23 | NO | NO |
CVE-2023-27343HIGH PDF-XChange Editor EMF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected instal | May 3, 2024 | 7.8 | 23 | NO | NO |
CVE-2023-27341HIGH PDF-XChange Editor TIF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected instal | May 3, 2024 | 7.8 | 23 | NO | NO |
CVE-2023-27340HIGH PDF-XChange Editor PNG File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected instal | May 3, 2024 | 7.8 | 23 | NO | NO |
CVE-2023-27337HIGH PDF-XChange Editor PDF File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected install | May 3, 2024 | 7.8 | 23 | NO | NO |
CVE-2024-27327HIGH PDF-XChange Editor PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected instal | Apr 1, 2024 | 7.8 | 23 | NO | NO |
CVE-2025-6661HIGH PDF-XChange Editor App Object Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of | Jun 25, 2025 | 7.8 | 22 | NO | NO |
Exploit Exposure
Signals from CVEs in this product scope (172 CVEs).
CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
0 CVEs
0.0% of CVEs· Bottom 1%
Social Chatter
Signals from CVEs in this product scope (172 CVEs).
Media Mentions
Signals from CVEs in this product scope (172 CVEs).
Top CNAs Publishing CVEs For Pdf Tools
Top CWEs
Versions
| Version | CVE Count | Avg CVSS | Avg EPSS | KEV | Exploits |
|---|---|---|---|---|---|
| 9.5.368.0 | 32 | 6.9 | 0.4% | 0 | 0 |
| 9.5.367.0 | 4 | 6.1 | 0.4% | 0 | 0 |
| 9.5.366.0 | 16 | 7.2 | 0.4% | 0 | 0 |
| 9.5.365.0 | 2 | 7.8 | 0.4% | 0 | 0 |
| 9.4.364.0 | 10 | 7.6 | 0.5% | 0 | 0 |
| 9.4.362.0 | 3 | 7.0 | 0.6% | 0 | 0 |
| 9.3.361.0 | 4 | 7.8 | 0.6% | 0 | 0 |
| 10.5.2.395 | 23 | 5.3 | 0.2% | 0 | 0 |
| 10.5.1.394 | 1 | 7.8 | 0.3% | 0 | 0 |
| 10.4.0.388 | 1 | 3.3 | 0.2% | 0 | 0 |
| 10.3.1.387 | 4 | 6.1 | 0.3% | 0 | 0 |
| 10.3.0.386 | 30 | 6.7 | 0.3% | 0 | 0 |
| 10.1.1.381 | 9 | 5.2 | 0.4% | 0 | 0 |
| 10.1.0.380 | 7 | 6.2 | 0.4% | 0 | 0 |
| 10.0.1.371 | 23 | 7.0 | 0.4% | 0 | 0 |