PDFsam Enhanced vulnerabilities
5 known CVE vulnerabilities in PDFsam Enhanced, translated and rated.
- CVE-2025-14405Medium
PDFsam Enhanced Uncontrolled Search Path Element Local Privilege Escalation Vulnerability. This vulnerability allows physically-present attackers to escalate privileges on affected installations of PDFsam Enhanced. An attacker must first obtain the ability to mount a malicious drive onto the target system to exploit this vulnerability.
- CVE-2025-14404High
A vulnerability in PDFsam Enhanced when processing XLS files allows remote attackers to execute arbitrary code in the context of the current user. The flaw results from allowing dangerous script execution without user warning. User interaction is required, such as opening a malicious file.
- CVE-2025-14403High
A vulnerability in PDFsam Enhanced allows remote attackers to execute arbitrary code in the context of the current user. The flaw results from allowing dangerous script execution without user warning in the Launch action. User interaction is required, such as visiting a malicious page or opening a malicious file.
- CVE-2025-14402High
A vulnerability in PDFsam Enhanced when processing DOC files allows remote attackers to execute arbitrary code in the context of the current user. The flaw results from allowing dangerous script execution without user warning. User interaction is required, such as opening a malicious file.
- CVE-2025-14401High
An Out-Of-Bounds Read vulnerability in PDFsam Enhanced allows remote attackers to execute arbitrary code in the context of the current process. The flaw results from lack of proper validation of user-supplied data when handling App objects. User interaction is required, such as opening a malicious file.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS

