Vulnerability feed
CVE and vendor PSIRT advisories from 13 sources, last 30 days. Updated hourly, last run
| Expand | Severity |
Score |
Advisory |
Title |
Source |
Flags |
Published |
|---|---|---|---|---|---|---|---|
| Unknown | n/a | CVE-2025-45528 |
An issue in Nitro Software, Inc Nitro PDF Pro for macOS v.14.7 allows a local attacker to execute arbitrary code via a crafted PDF
Nitro Software, IncNitro Software, Inc Nitro PDF Pro
|
NVD | |||
|
CVE-2025-45528An issue in Nitro Software, Inc Nitro PDF Pro for macOS v.14.7 allows a local attacker to execute arbitrary code via a crafted PDF
Executive summaryThe advisory says Nitro PDF Pro for macOS version 14.7 has an issue that lets a local attacker run arbitrary code by opening a crafted PDF. The advisory does not state a severity rating, and it does not describe a vendor fix or recommended action. The rest of the page text is unrelated boat dealer website content. Technical summaryThe advisory describes an issue that allows arbitrary code execution through a crafted PDF, which suggests a memory or input handling flaw, but the specific weakness class is not stated. The attack requires a local attacker and a victim to open the crafted file, as the text indicates local access. Affected version is given as v.14.7 for Nitro PDF Pro on macOS. Fixed versions, workarounds, CVSS score, and detection guidance are not stated. The remaining advisory text is unrelated boat dealer web page content and contains no technical detail. Summaries are generated by AI from the linked advisory text. Confirm versions and fixes at the source. Summarized from nitro.com ScoreNo CVSS score published. Affects
NIST National Vulnerability DatabasePublished
Read the advisory
|
|||||||