Dotpdn Paint.net — known CVE vulnerabilities

Every CVE whose affected-product data names Dotpdn Paint.net, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (2)

• CVE-2018-18446 — CVSS 9.8 (critical): dotPDN Paint.NET before 4.1.2 allows Deserialization of Untrusted Data (issue 1 of 2).
• CVE-2018-18447 — CVSS 9.8 (critical): dotPDN Paint.NET before 4.1.2 allows Deserialization of Untrusted Data (issue 2 of 2).