Sodapdf Soda Pdf Desktop — known CVE vulnerabilities

Every CVE whose affected-product data names Sodapdf Soda Pdf Desktop, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (3)

• CVE-2025-14413 — CVSS 7.8 (high): Soda PDF Desktop CBZ File Parsing Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to…
• CVE-2025-14414 — CVSS 7.8 (high): Soda PDF Desktop Word File Insufficient UI Warning Remote Code Execution Vulnerability. This vulnerability allows remote attackers to…
• CVE-2018-18689 — CVSS 5.3 (medium): The Portable Document Format (PDF) specification does not provide any information regarding the concrete procedure of how to validate…