CVE-2025-14406
HighCVSS 7.8Exploitation Probability (EPSS)
Low risk5th percentile - higher than 5% of all known CVEs
Summary
Soda PDF Desktop contains a local privilege escalation vulnerability due to an uncontrolled search path element. The application loads an OpenSSL configuration file from an unsecured location, allowing an attacker with low-privileged code execution to run arbitrary code as SYSTEM.
Risk Assessment
An attacker must first obtain the ability to execute low-privileged code, but can then escalate to SYSTEM privileges, taking control of the system. This requires user interaction or prior access to the system.
Recommendation
Update Soda PDF Desktop to the latest version that fixes the issue. Additionally, restrict user privileges and monitor for unusual behavior of Soda PDF-related processes.
Other vulnerabilities in Soda PDF Desktop
See all- CVE-2025-14415High
A vulnerability in Soda PDF Desktop allows remote attackers to execute arbitrary code in the context of the current user. The flaw results from allowing dangerous script execution without user warning in the Launch action. User interaction is required, such as visiting a malicious page or opening a malicious file.
- CVE-2025-14414High
A vulnerability in Soda PDF Desktop allows remote code execution when handling Word files. The flaw results from allowing execution of dangerous scripts without user warning. Exploitation requires user interaction (opening a malicious file or visiting a malicious page).
- CVE-2025-14413High
A vulnerability in Soda PDF Desktop's CBZ file parsing involves lack of validation of a user-supplied path before file operations, enabling directory traversal. Exploitation requires user interaction (opening a malicious file or visiting a malicious page). It can lead to remote code execution in the context of the current user.
- CVE-2025-14412High
A vulnerability in Soda PDF Desktop allows remote attackers to execute arbitrary code. It requires user interaction (visiting a malicious page or opening a malicious file) and results from allowing dangerous script execution without user warning when handling XLS files.
- CVE-2025-14411Medium
Soda PDF Desktop contains an out-of-bounds read during PDF parsing due to lack of proper validation of user-supplied data. A remote attacker can disclose sensitive information and, combined with other vulnerabilities, execute arbitrary code in the context of the current process; user interaction (opening a malicious file or page) is required.
- CVE-2025-14410Medium
Soda PDF Desktop contains an out-of-bounds read during PDF parsing due to lack of proper validation of user-supplied data. A remote attacker can disclose sensitive information and, combined with other vulnerabilities, execute arbitrary code in the context of the current process; user interaction (opening a malicious file or page) is required.
- CVE-2025-14409High
A vulnerability in Soda PDF Desktop allows remote attackers to execute arbitrary code. It requires user interaction (visiting a malicious page or opening a malicious file) and results from lack of proper validation of user-supplied data during PDF parsing, leading to an out-of-bounds write.
- CVE-2025-14408Low
A vulnerability in Soda PDF Desktop during PDF file parsing allows out-of-bounds read and information disclosure. It requires user interaction (visiting a malicious page or opening a malicious file). It can be exploited in conjunction with other vulnerabilities to execute code.
- CVE-2025-14407Medium
Soda PDF Desktop contains a memory corruption issue during PDF parsing due to lack of proper validation of user-supplied data. A remote attacker can disclose sensitive information and, combined with other vulnerabilities, execute arbitrary code in the context of the current process; user interaction (opening a malicious file or page) is required.
Original NVD description (English source)
Soda PDF Desktop Uncontrolled Search Path Element Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Soda PDF Desktop. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the configuration of OpenSSL. The product loads an OpenSSL configuration file from an unsecured location. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of SYSTEM. Was ZDI-CAN-25793.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS