CyberSecBulletin

Gonitro vulnerabilities

We track 2 vulnerabilities in Gonitro products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on April 13, 2026.

2vulnerabilities
0critical
2high
0exploited
8.0average CVSS score

Latest Gonitro vulnerabilities

  • 8.4 High severity

    Nitro PDF Pro: Use After Free

    CVE-2025-69627Gonitro

    Nitro PDF Pro for Windows 14.41.1.4 contains a heap use-after-free vulnerability in the implementation of the JavaScript method this.mailDoc(). During execution, an internal XID object is allocated and then freed prematurely, after which the freed pointer is s

  • 7.5 High severity

    Nitro PDF Pro: NULL Pointer Dereference

    CVE-2025-69624Gonitro

    Nitro PDF Pro before 14.43 for Windows contains a NULL pointer dereference vulnerability in the JavaScript implementation of app.alert(). When app.alert() is called with more than one argument and the first argument evaluates to null (for example, app.alert(ap