Ezpdf Reader

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:unidocs:ezpdf_reader:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorUnidocs (87a273d7-ec71-52b0-a710-fe03d6a2cdf1)
ProductEzpdf Reader (79135afc-b1cf-5494-826a-a213420a894b)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-2516 vulnerable 2026-06-08 07:55:17.163372 Unidocs ezPDF DRM Reader/ezPDF Reader SHFOLDER.dll uncontrolled search path
HIGH (7)
A vulnerability was identified in Unidocs ezPDF DRM Reader and ezPDF Reader 2.0/3.0.0.4. This affects an unknown part in the library SHFOLDER.dll. Such manipulation leads to uncontrolled search path. The attack needs to be performed locally. Attacks of this nature are highly complex. It is indicated that the exploitability is difficult. The exploit is publicly available and might be used. Upgrading the affected component is recommended. The vendor explains: "[W]e have already addressed similar DLL search path vulnerability patterns through prior security updates. (...) Users are advised to use the latest version provided by the vendor."
Published: 2026-02-15T12:02:06.101Z
Updated: 2026-04-13T06:42:44.784Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-7870 vulnerable 2026-06-08 05:27:14.442105 Details available
MEDIUM (6.4)
A memory corruption vulnerability exists when ezPDF improperly handles the parameter. This vulnerability exists due to insufficient validation of the parameter.
Published: 2021-06-29T13:15:26.000Z
Updated: 2024-08-04T09:41:01.926Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.