Sodapdf vulnerabilities
We track 6 vulnerabilities in Sodapdf products across 2 products. 6 are rated high or critical, and none are known to be exploited. The most recent was published on December 23, 2025.
Latest Sodapdf vulnerabilities
- 7.8 High severity
Desktop: Missing User Interaction for Potentially Unsafe Action
Soda PDF Desktop Launch Insufficient UI Warning Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Soda PDF Desktop. User interaction is required to exploit this vulnerability
- 7.8 High severity
Desktop: Missing User Interaction for Potentially Unsafe Action
Soda PDF Desktop Word File Insufficient UI Warning Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Soda PDF Desktop. User interaction is required to exploit this vulnerabili
- 7.8 High severity
Desktop: Improper Limitation of a Pathname to a Restricted Directory
Soda PDF Desktop CBZ File Parsing Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Soda PDF Desktop. User interaction is required to exploit this vulnerab
- 7.8 High severity
Desktop: Missing User Interaction for Potentially Unsafe Action
Soda PDF Desktop XLS File Insufficient UI Warning Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Soda PDF Desktop. User interaction is required to exploit this vulnerabilit
- 7.8 High severity
Desktop: Out-of-bounds Write
Soda PDF Desktop PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Soda PDF Desktop. User interaction is required to exploit this vulnerab
- 7.8 High severity
Desktop: Uncontrolled Search Path Element
Soda PDF Desktop Uncontrolled Search Path Element Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Soda PDF Desktop. An attacker must first obtain the ability to execute low