Browse CVEs

HIGH 8.4 CVE-2025-69627 Nitro PDF Pro for Windows 14.41.1.4 contains a heap use-after-free vulnerability in the implementation of the JavaScript method this.mailDoc(). Durin… Nitro Pdf Pro Mitigation only Fix from $1,9502026-04-13 HIGH 7.5 CVE-2025-66769 A NULL pointer dereference in Nitro PDF Pro for Windows v14.41.1.4 allows attackers to cause a Denial of Service (DoS) via a crafted XFA packet. Nitro Pdf Pro Mitigation only Fix from $1,9502026-04-13 HIGH 7.5 CVE-2025-69624 Nitro PDF Pro before 14.43 for Windows contains a NULL pointer dereference vulnerability in the JavaScript implementation of app.alert(). When app.al… Nitro Pdf Pro Mitigation only Fix from $1,9502026-04-13 MEDIUM 5.5 CVE-2025-67825 An issue was discovered in Nitro PDF Pro for Windows before 14.42.0.34. In certain cases, it displays signer information from a non-verified PDF fiel… Nitro Pdf Pro 14.42.0.34+ Fix from $1,6002026-01-08 HIGH 7.8 CVE-2021-21796EPSS 16% An exploitable use-after-free vulnerability exists in the JavaScript implementation of Nitro Pro PDF. A specially crafted document can cause an objec… Nitro Pro No fix yet Fix from $1,9502021-10-18 HIGH 7.8 CVE-2021-21797EPSS 15% An exploitable double-free vulnerability exists in the JavaScript implementation of Nitro Pro PDF. A specially crafted document can cause a reference… Nitro Pro No fix yet Fix from $1,9502021-10-18 HIGH 7.8 CVE-2021-21798EPSS 16% An exploitable return of stack variable address vulnerability exists in the JavaScript implementation of Nitro Pro PDF. A specially crafted document … Nitro Pro No fix yet Fix from $1,9502021-09-15 HIGH 7.8 CVE-2020-6113EPSS 69% An exploitable vulnerability exists in the object stream parsing functionality of Nitro Software, Inc.’s Nitro Pro 13.13.2.242 when updating its cros… Nitro Pro No fix yet Fix from $1,9502020-09-17 HIGH 7.8 CVE-2020-6115 An exploitable vulnerability exists in the cross-reference table repairing functionality of Nitro Software, Inc.’s Nitro Pro 13.13.2.242. While searc… Nitro Pro No fix yet Fix from $1,9502020-09-17 HIGH 7.8 CVE-2020-6116EPSS 28% An arbitrary code execution vulnerability exists in the rendering functionality of Nitro Software, Inc.’s Nitro Pro 13.13.2.242. When drawing the con… Nitro Pro No fix yet Fix from $1,9502020-09-17 HIGH 7.8 CVE-2020-6112EPSS 17% An exploitable code execution vulnerability exists in the JPEG2000 Stripe Decoding functionality of Nitro Software, Inc.’s Nitro Pro 13.13.2.242 when… Nitro Pro No fix yet Fix from $1,9502020-09-17 HIGH 8.8 CVE-2020-6146EPSS 77% An exploitable code execution vulnerability exists in the rendering functionality of Nitro Pro 13.13.2.242 and 13.16.2.300. When drawing the contents… Nitro Pro No fix yet Fix from $1,9502020-09-16 HIGH 8.8 CVE-2020-6074EPSS 41% An exploitable code execution vulnerability exists in the PDF parser of Nitro Pro 13.9.1.155. A specially crafted PDF document can cause a use-after-… Nitro Pro No fix yet Fix from $1,9502020-05-18 HIGH 7.8 CVE-2020-6092EPSS 42% An exploitable code execution vulnerability exists in the way Nitro Pro 13.9.1.155 parses Pattern objects. A specially crafted PDF file can trigger a… Nitro Pro No fix yet Fix from $1,9502020-05-18 MEDIUM 5.5 CVE-2020-6093 An exploitable information disclosure vulnerability exists in the way Nitro Pro 13.9.1.155 does XML error handling. A specially crafted PDF document … Nitro Pro No fix yet Fix from $1,6002020-05-18 HIGH 8.1 CVE-2020-10223 npdf.dll in Nitro Pro before 13.13.2.242 is vulnerable to JBIG2Decode CNxJBIG2DecodeStream Heap Corruption at npdf!CAPPDAnnotHandlerUtils::create_pop… Nitro Pro 13.13.2.242+ Fix from $1,9502020-03-08 HIGH 8.1 CVE-2020-10222 npdf.dll in Nitro Pro before 13.13.2.242 is vulnerable to Heap Corruption at npdf!nitro::get_property+2381 via a crafted PDF document. Nitro Pro 13.13.2.242+ Fix from $1,9502020-03-08 HIGH 7.8 CVE-2013-2773 Nitro PDF 8.5.0.26: A specially crafted DLL file can facilitate Arbitrary Code Execution Nitropdf Mitigation only Fix from $1,9502020-01-14 MEDIUM 5.5 CVE-2019-19817 The JBIG2Decode library in npdf.dll in Nitro Free PDF Reader 12.0.0.112 has a CAPPDAnnotHandlerUtils::PDAnnotHandlerDestroyData2+0x2e8a Out-of-Bounds… Nitro Free Pdf Reader No fix yet Fix from $1,6002020-01-10 MEDIUM 5.5 CVE-2019-19819 The JBIG2Globals library in npdf.dll in Nitro Free PDF Reader 12.0.0.112 has a CAPPDAnnotHandlerUtils::PDAnnotHandlerDestroyData2+0x90ec NULL Pointer… Nitropdf No fix yet Fix from $1,6002020-01-10 MEDIUM 5.5 CVE-2019-19818 The JBIG2Decode library in npdf.dll in Nitro Free PDF Reader 12.0.0.112 has a CAPPDAnnotHandlerUtils::PDAnnotHandlerDestroyData2+0xa08a Out-of-Bounds… Nitro Free Pdf Reader No fix yet Fix from $1,6002019-12-16 HIGH 7.8 CVE-2019-18958 Nitro Pro before 13.2 creates a debug.log file in the directory where a .pdf file is located, if the .pdf document was produced by an OCR operation o… Nitro Pro 13.2+ Fix from $1,9502019-11-21 HIGH 7.8 CVE-2019-5045 A specifically crafted jpeg2000 file embedded in a PDF file can lead to a heap corruption when opening a PDF document in NitroPDF 12.12.1.522. With c… Nitropdf No fix yet Fix from $1,9502019-10-09 HIGH 7.8 CVE-2019-5046 A specifically crafted jpeg2000 file embedded in a PDF file can lead to a heap corruption when opening a PDF document in NitroPDF 12.12.1.522. With c… Nitropdf No fix yet Fix from $1,9502019-10-09 HIGH 7.8 CVE-2019-5047 An exploitable Use After Free vulnerability exists in the CharProcs parsing functionality of NitroPDF. A specially crafted PDF can cause a type confu… Nitropdf No fix yet Fix from $1,9502019-10-09 HIGH 7.8 CVE-2019-5048 A specifically crafted PDF file can lead to a heap corruption when opened in NitroPDF 12.12.1.522. With careful memory manipulation, this can lead to… Nitropdf No fix yet Fix from $1,9502019-10-09 HIGH 7.8 CVE-2019-5050 A specifically crafted PDF file can lead to a heap corruption when opened in NitroPDF 12.12.1.522. With careful memory manipulation, this can lead to… Nitropdf No fix yet Fix from $1,9502019-10-09 HIGH 7.8 CVE-2019-5053 An exploitable use-after-free vulnerability exists in the Length parsing function of NitroPDF. A specially crafted PDF can cause a type confusion, re… Nitropdf No fix yet Fix from $1,9502019-10-09 HIGH 8.8 CVE-2017-7442EPSS 41% Nitro Pro 11.0.3.173 allows remote attackers to execute arbitrary code via saveAs and launchURL calls with directory traversal sequences. Nitro Pro No fix yet Fix from $1,9502017-08-03 MEDIUM 5.5 CVE-2017-7950 Nitro Pro 11.0.3 and earlier allows remote attackers to cause a denial of service (application crash) via a crafted PCX file. Nitro Pro after 11.0.3 Fix from $1,6002017-07-07