Nitro Pdf Pro
Approved changes feed: RSS · Atom
cpe:2.3:a:gonitro:nitro_pdf_pro:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Gonitro (32336533-28b8-5d7f-a4d9-baf088b90e86) |
|---|---|
| Product | Nitro Pdf Pro (9c3bdb53-e368-505d-85eb-82f28f7edb4a) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-67825 |
vulnerable | 2026-06-08 07:41:20.519075 |
Details available
An issue was discovered in Nitro PDF Pro for Windows before 14.42.0.34. In certain cases, it displays signer information from a non-verified PDF field rather than from the verified certificate subject. This could allow a document to present inconsistent signer details. The display logic was updated to ensure signer information consistently reflects the verified certificate identity.
Published: 2026-01-08T00:00:00.000Z
Updated: 2026-02-02T16:30:49.289Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-35288 |
vulnerable | 2026-06-08 06:37:35.865115 |
Details available
Nitro PDF Pro before 13.70.8.82 and 14.x before 14.26.1.0 allows Local Privilege Escalation in the MSI Installer because custom actions occur unsafely in repair mode. CertUtil is run in a conhost.exe window, and there is a mechanism allowing CTRL+o to launch cmd.exe as NT AUTHORITY\SYSTEM.
Published: 2024-10-09T00:00:00.000Z
Updated: 2025-03-25T16:43:00.153Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-8711 |
vulnerable | 2026-06-08 05:08:14.641743 |
Details available
HIGH (8.8)
A potential remote code execution vulnerability exists in the PDF parsing functionality of Nitro Pro 10. A specially crafted PDF file can cause a vulnerability resulting in potential code execution. An attacker can send the victim a specific PDF file to trigger this vulnerability.
Published: 2017-02-10T17:00:00.000Z
Updated: 2024-08-06T02:27:41.281Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-8709 |
vulnerable | 2026-06-08 05:08:14.638722 |
Details available
HIGH (8.8)
A remote out of bound write / memory corruption vulnerability exists in the PDF parsing functionality of Nitro Pro 10. A specially crafted PDF file can cause a vulnerability resulting in potential memory corruption. An attacker can send the victim a specific PDF file to trigger this vulnerability.
Published: 2017-02-10T17:00:00.000Z
Updated: 2024-08-06T02:27:41.278Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.