How many CVEs does PDF-XChange have?

PDF-XChange has 289 published CVE records since 2018, including 43 in the last two years.

How many PDF-XChange CVEs are in CISA KEV?

None of PDF-XChange's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Which PDF-XChange products have the most CVEs?

The PDF-XChange products with the most published CVEs are PDF-XChange Editor, pdf-tools, pdf-xchange_pro, pdf_xchange_editor.

What are the most common weakness types in PDF-XChange CVEs?

PDF-XChange's CVEs most often map to these CWE weakness types: CWE-125 (Out-of-bounds Read), CWE-787 (Out-of-bounds Write), CWE-416 (Use After Free), CWE-122 (Heap-based Buffer Overflow).

Are there public exploits for PDF-XChange vulnerabilities?

No PDF-XChange CVEs currently have a tracked public exploit in this dataset.

What is the average severity of PDF-XChange CVEs?

The average CVSS base score across PDF-XChange's scored CVEs is 6.7.

RadicalNotion.AI

Log in Start free

Log in

Log in Start free

289 CVEs

PDF-XChange Vulnerabilities

Name: PDF-XChange vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

CVE security advisories and vulnerability history for PDF-XChange.

289

Total CVEs

Published

0

In CISA KEV

Exploited in the wild

0

Public exploits

PoC or exploit code

6.7

Avg CVSS

2018–2026

Overview

PDF-XChange has 289 published CVE records since 2018, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 0 have a known public exploit. The average CVSS base score across scored CVEs is 6.7.

This page aggregates every publicly disclosed vulnerability (CVE) affecting PDF-XChange products, with severity breakdowns, the most-affected products, the most common weakness types, and the latest disclosures.

Security scorecard

A quick read on PDF-XChange's vulnerability posture, as a share of its 289 published CVEs.

Average CVSS: 6.7
Critical / high: 57%
Actively exploited (KEV): 0%
Public exploit available: 0%
Patch available: 38%

Severity and exploitation

How the CVSS severity of PDF-XChange's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical0

High166

Medium106

Low17

In CISA’s Known Exploited Vulnerabilities catalog

0

None of PDF-XChange's CVEs are currently listed in CISA's KEV catalog.

Public exploits

0

No PDF-XChange CVEs currently have a tracked public exploit.

Most affected products

The PDF-XChange products with the most published CVEs. Follow any product to browse its versions and vulnerabilities.

Common weakness types

The CWE weakness categories most often found in PDF-XChange CVEs. Follow any weakness for its full explanation.

CNAs that assign these CVEs

The CVE Numbering Authorities that publish PDF-XChange CVE records.

Disclosure activity by year

How many PDF-XChange CVEs were published each year.

2018

1

2019

1

2021

1

2023

93

2024

150

2025

42

2026

1

Latest PDF-XChange CVEs

The most recently disclosed vulnerabilities affecting PDF-XChange.

PDF-XChange Editor TrackerUpdate Uncontrolled Search Path Element Local Privilege Escalation Vulnerability
CWE-427
High · CVSS 7.3
EPSS 0.3%2026-02-20
High vulnerability · 2025-12-09
CWE-476
High · CVSS 7.5
EPSS 0.3%2025-12-09
High vulnerability · 2025-12-09
CWE-476
High · CVSS 7.5
EPSS 0.3%2025-12-09
Medium vulnerability · 2025-12-02
CWE-125
Medium · CVSS 6.5
EPSS 0.3%2025-12-02
Medium vulnerability · 2025-08-05
CWE-125
Medium · CVSS 6.5
EPSS 0.5%2025-08-05
Medium vulnerability · 2025-08-05
CWE-125
Medium · CVSS 6.5
EPSS 0.5%2025-08-05
PDF-XChange Editor U3D File Parsing Use-After-Free Remote Code Execution Vulnerability
CWE-416
High · CVSS 7.8
EPSS 0.2%2025-06-25
PDF-XChange Editor U3D File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
CWE-125
Low · CVSS 3.3
EPSS 0.2%2025-06-25
PDF-XChange Editor U3D File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability
CWE-125
High · CVSS 7.8
EPSS 0.2%2025-06-25
PDF-XChange Editor U3D File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
CWE-125
Low · CVSS 3.3
EPSS 0.2%2025-06-25
PDF-XChange Editor U3D File Parsing Use-After-Free Remote Code Execution Vulnerability
CWE-416
High · CVSS 7.8
EPSS 0.2%2025-06-25
PDF-XChange Editor U3D File Parsing Use-After-Free Remote Code Execution Vulnerability
CWE-416
High · CVSS 7.8
EPSS 0.2%2025-06-25

Track new PDF-XChange CVEs as they are disclosed and get AI-written analysis and remediation guidance.

Monitor PDF-XChange CVEs

Other vendors

Browse vulnerabilities for other tracked vendors.

sourceware297 CVEs discourse296 CVEs Open-Xchange293 CVEs Eclipse Foundation290 CVEs Progress289 CVEs Splunk287 CVEs xwiki285 CVEs Mayuri K276 CVEs

Browse all vendors

Frequently asked questions

Common questions about PDF-XChange vulnerabilities.

How many CVEs does PDF-XChange have?: PDF-XChange has 289 published CVE records since 2018, including 43 in the last two years.
How many PDF-XChange CVEs are in CISA KEV?: None of PDF-XChange's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Which PDF-XChange products have the most CVEs?: The PDF-XChange products with the most published CVEs are PDF-XChange Editor, pdf-tools, pdf-xchange_pro, pdf_xchange_editor.
What are the most common weakness types in PDF-XChange CVEs?: PDF-XChange's CVEs most often map to these CWE weakness types: CWE-125 (Out-of-bounds Read), CWE-787 (Out-of-bounds Write), CWE-416 (Use After Free), CWE-122 (Heap-based Buffer Overflow).
Are there public exploits for PDF-XChange vulnerabilities?: No PDF-XChange CVEs currently have a tracked public exploit in this dataset.
What is the average severity of PDF-XChange CVEs?: The average CVSS base score across PDF-XChange's scored CVEs is 6.7.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track PDF-XChange vulnerabilities

Monitor new PDF-XChange vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing