Skip to content

RadicalNotion.AI

We do not sell or share your personal information.

© 2026 RadicalNotion.AI

Security Data

CWE Directory
CAPEC Directory
CNA Directory
CNA Leaderboard
CNA Report Cards
Vendor Directory
Patched Functions
Data Sources

Calculators

CVSS Calculator
CVSS 4.0
CVSS 3.1
CVSS 3.0
CVSS 2.0
Badge Builder

Platform

My Vulnerabilities
Insights
Notifications
Pricing

Learn

Guides
What is a CVE?
What is CVSS?
The CISA KEV catalog
What is EPSS?

Company

About
Blog
Careers
Contact
Demo

Account

Sign up
Log in

Legal

Security
Privacy
Terms

RadicalNotion.AI

Security data

Weaknesses (CWE)The MITRE CWE weakness catalog
Attack Patterns (CAPEC)MITRE CAPEC attack patterns
CNAsNumbering authorities and report cards
VendorsVulnerabilities by vendor
Patched FunctionsWhere CVE fixes land in code

Tools

CVSS CalculatorScore CVSS 4.0, 3.1, 3.0 & 2.0
Badge BuilderEmbeddable SVG badges for READMEs

Resources

LearnSecurity guides
Data SourcesCVE data sources

About Blog Pricing Demo

Log in Create an account

Home
Vendors
Pdfxchange
Pdf Xchange Editor

pdf-xchange editor Vulnerabilities: CVEs, CISA KEV & Security Advisories

289 CVEs

PX

pdf-xchange editor Vulnerabilities

CVE security advisories and vulnerability history for pdf-xchange editor by pdf-xchange.

289

Total CVEs

Published

0

In CISA KEV

Exploited in the wild

6

Public exploits

PoC or exploit code

6.7

Avg CVSS

2018–2026

Last updated February 20, 2026

Overview

pdf-xchange editor has 289 published CVE records since 2018, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 6 have a known public exploit. The average CVSS base score across scored CVEs is 6.7. Affected platforms include windows.

Severity and exploitation

How the CVSS severity of pdf-xchange editor's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical0

High166

Medium106

Low17

In CISA’s Known Exploited Vulnerabilities catalog

0

None of pdf-xchange editor's CVEs are currently listed in CISA's KEV catalog.

Public exploits

6

6 of pdf-xchange editor's CVEs have a known public exploit available.

Affected versions and CVEs

Browse every pdf-xchange editor version named in a CVE, then pick one to see only the CVEs that affect it.

Version ranges

Fixed in

9.5.366.065 CVEs
10.3.0.38716 CVEs
10.4.2.3907 CVEs
10.4.0.3884 CVEs
9.5.3684 CVEs
10.0.0.13 CVEs
10.5.0.3933 CVEs
10.1.2.3822 CVEs
10.3.0.3862 CVEs
10.4.1.3892 CVEs
10.0.11 CVE
10.1.3.3831 CVE
8.0.330.01 CVE
9.4.362.01 CVE

Find a version

289 CVEs

Sort

PDF-XChange Editor TrackerUpdate Uncontrolled Search Path Element Local Privilege Escalation Vulnerability
CVE-2026-2040CWE-427
High · CVSS 7.3
EPSS 0.3% (18th pct)2026-02-20
High vulnerability · 2025-12-09
CVE-2025-64086
Public exploit
CWE-476
High · CVSS 7.5
EPSS 0.3% (22th pct)2025-12-09
High vulnerability · 2025-12-09
CVE-2025-64085
Public exploit
CWE-476
High · CVSS 7.5
EPSS 0.3% (22th pct)2025-12-09
Medium vulnerability · 2025-12-02
CVE-2025-58113
Public exploit
CWE-125
Medium · CVSS 6.5
EPSS 0.5% (42th pct)2025-12-02
Medium vulnerability · 2025-08-05
CVE-2025-27931
Public exploit
CWE-125
Medium · CVSS 6.5
EPSS 0.5% (43th pct)2025-08-05
Medium vulnerability · 2025-08-05
CVE-2025-47152
Public exploit
CWE-125
Medium · CVSS 6.5
EPSS 0.5% (43th pct)2025-08-05
PDF-XChange Editor U3D File Parsing Use-After-Free Remote Code Execution Vulnerability
CVE-2025-6640CWE-416
High · CVSS 7.8
EPSS 0.3% (20th pct)2025-06-25
PDF-XChange Editor U3D File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
CVE-2025-6641CWE-125
Low · CVSS 3.3
EPSS 0.2% (15th pct)2025-06-25
PDF-XChange Editor U3D File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability
CVE-2025-6642CWE-125
High · CVSS 7.8
EPSS 0.3% (18th pct)2025-06-25
PDF-XChange Editor U3D File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
CVE-2025-6643CWE-125
Low · CVSS 3.3
EPSS 0.2% (15th pct)2025-06-25
PDF-XChange Editor U3D File Parsing Use-After-Free Remote Code Execution Vulnerability
CVE-2025-6644CWE-416
High · CVSS 7.8
EPSS 0.3% (20th pct)2025-06-25
PDF-XChange Editor U3D File Parsing Use-After-Free Remote Code Execution Vulnerability
CVE-2025-6645CWE-416
High · CVSS 7.8
EPSS 0.3% (20th pct)2025-06-25
PDF-XChange Editor U3D File Parsing Use-After-Free Information Disclosure Vulnerability
CVE-2025-6646CWE-416
Low · CVSS 3.3
EPSS 0.3% (16th pct)2025-06-25
PDF-XChange Editor U3D File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
CVE-2025-6647CWE-787
High · CVSS 7.8
EPSS 0.3% (18th pct)2025-06-25
PDF-XChange Editor U3D File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
CVE-2025-6648CWE-125
Low · CVSS 3.3
EPSS 0.2% (15th pct)2025-06-25
PDF-XChange Editor U3D File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
CVE-2025-6649CWE-125
Low · CVSS 3.3
EPSS 0.2% (15th pct)2025-06-25
PDF-XChange Editor U3D File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
CVE-2025-6650CWE-125
Low · CVSS 3.3
EPSS 0.2% (15th pct)2025-06-25
PDF-XChange Editor JP2 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
CVE-2025-6651CWE-787
High · CVSS 7.8
EPSS 0.3% (18th pct)2025-06-25
PDF-XChange Editor PRC File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
CVE-2025-6652CWE-125
Low · CVSS 3.3
EPSS 0.2% (15th pct)2025-06-25
PDF-XChange Editor PRC File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
CVE-2025-6653CWE-125
Low · CVSS 3.3
EPSS 0.2% (15th pct)2025-06-25
PDF-XChange Editor PRC File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
CVE-2025-6654CWE-787
High · CVSS 7.8
EPSS 0.3% (18th pct)2025-06-25
PDF-XChange Editor PRC File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
CVE-2025-6655CWE-125
Low · CVSS 3.3
EPSS 0.2% (15th pct)2025-06-25
PDF-XChange Editor PRC File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
CVE-2025-6656CWE-125
Low · CVSS 3.3
EPSS 0.2% (15th pct)2025-06-25
PDF-XChange Editor PRC File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
CVE-2025-6657CWE-125
Low · CVSS 3.3
EPSS 0.2% (15th pct)2025-06-25
PDF-XChange Editor PRC File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
CVE-2025-6658CWE-125
Low · CVSS 3.3
EPSS 0.2% (15th pct)2025-06-25
PDF-XChange Editor PRC File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
CVE-2025-6659CWE-787
High · CVSS 7.8
EPSS 0.3% (18th pct)2025-06-25
PDF-XChange Editor GIF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability
CVE-2025-6660CWE-122
High · CVSS 7.8
EPSS 0.3% (21th pct)2025-06-25
PDF-XChange Editor App Object Use-After-Free Remote Code Execution Vulnerability
CVE-2025-6661CWE-416
High · CVSS 7.8
EPSS 0.3% (20th pct)2025-06-25
PDF-XChange Editor PRC File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
CVE-2025-6662CWE-125
Low · CVSS 3.3
EPSS 0.2% (15th pct)2025-06-25
PDF-XChange Editor RTF File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability
CVE-2025-2231CWE-125
High · CVSS 7.8
EPSS 0.3% (19th pct)2025-03-24

Showing 30 of 289

Common weakness types

The CWE weakness categories most often found in pdf-xchange editor CVEs. Follow any weakness for its full explanation.

CWE-125Out-of-bounds Read154 CVEs
CWE-787Out-of-bounds Write64 CVEs
CWE-416Use After Free27 CVEs
CWE-122Heap-based Buffer Overflow10 CVEs
CWE-457Use of Uninitialized Variable7 CVEs
CWE-822Untrusted Pointer Dereference6 CVEs
CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer6 CVEs
CWE-749Exposed Dangerous Method or Function4 CVEs

Disclosure activity by year

How many pdf-xchange editor CVEs were published each year.

2018

1

2019

1

2021

1

2023

93

2024

150

2025

42

2026

1

Other pdf-xchange products

Browse vulnerabilities for other products by pdf-xchange.

pdf-tools172 CVEs pdf-xchange_pro27 CVEs pdf_xchange_editor2 CVEs

All pdf-xchange vulnerabilities

Frequently asked questions

Common questions about pdf-xchange editor vulnerabilities.

How many CVEs does pdf-xchange pdf-xchange editor have?: pdf-xchange pdf-xchange editor has 289 published CVE records since 2018.
How many pdf-xchange pdf-xchange editor CVEs are in CISA KEV?: None of pdf-xchange pdf-xchange editor's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for pdf-xchange pdf-xchange editor vulnerabilities?: Yes — 6 of pdf-xchange pdf-xchange editor's CVEs have a known public exploit.
Which versions of pdf-xchange pdf-xchange editor are affected?: 74 distinct pdf-xchange pdf-xchange editor versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in pdf-xchange pdf-xchange editor CVEs?: pdf-xchange pdf-xchange editor's CVEs most often map to these CWE weakness types: CWE-125 (Out-of-bounds Read), CWE-787 (Out-of-bounds Write), CWE-416 (Use After Free), CWE-122 (Heap-based Buffer Overflow).
What is the average severity of pdf-xchange pdf-xchange editor CVEs?: The average CVSS base score across pdf-xchange pdf-xchange editor's scored CVEs is 6.7.

References

All pdf-xchange vulnerabilities
The MITRE CVE Program (opens in a new tab)
Learn: What is a CVE?
CWE directory: the weakness types these CVEs map to

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track pdf-xchange editor vulnerabilities

Get an alert for each new pdf-xchange editor CVE, with AI-written analysis and remediation steps.

Create an account See pricing

On this page

Overview
Severity and exploitation
Affected versions and CVEs
Common weakness types
Disclosure activity
Other products
FAQ
References