Pdfpatcher vulnerabilities

1 known vulnerability in Pdfpatcher from Cnblogs. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.1 High severity

  Pdfpatcher: Improper Restriction of XML External Entity Reference

  CVE-2025-63917Nov 17, 2025Cnblogs

  PDFPatcher thru 1.1.3.4663 executable's XML bookmark import functionality does not restrict XML external entity (XXE) references. The application uses .NET's XmlDocument class without disabling external entity resolution, enabling attackers to: Read arbitrary