Nitro PDF Pro vulnerabilities

2 known vulnerabilities in Nitro PDF Pro from Gonitro. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.4 High severity

  Nitro PDF Pro: Use After Free

  CVE-2025-69627Apr 13, 2026Gonitro

  Nitro PDF Pro for Windows 14.41.1.4 contains a heap use-after-free vulnerability in the implementation of the JavaScript method this.mailDoc(). During execution, an internal XID object is allocated and then freed prematurely, after which the freed pointer is s

• 7.5 High severity

  Nitro PDF Pro: NULL Pointer Dereference

  CVE-2025-69624Apr 13, 2026Gonitro

  Nitro PDF Pro before 14.43 for Windows contains a NULL pointer dereference vulnerability in the JavaScript implementation of app.alert(). When app.alert() is called with more than one argument and the first argument evaluates to null (for example, app.alert(ap