enhanced vulnerabilities and fixes

Recent CVEs affecting enhanced, with upgrade or downgrade steps. 5 tracked.

enhanced has 5 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2025-12-23. Highest priority: CVE-2025-14401 (score 33/100).

• CVE-2025-14401 HIGH 7.8 DOWNGRADE PDFsam Enhanced App Out-Of-Bounds Read Remote Code Execution Vulnerability
• CVE-2025-14403 HIGH 7.8 DOWNGRADE PDFsam Enhanced Launch Insufficient UI Warning Remote Code Execution Vulnerability
• CVE-2025-14405 MEDIUM 6.8 DOWNGRADE PDFsam Enhanced Uncontrolled Search Path Element Local Privilege Escalation Vulnerability
• CVE-2025-14402 HIGH 7.0 DOWNGRADE PDFsam Enhanced DOC File Insufficient UI Warning Remote Code Execution Vulnerability
• CVE-2025-14404 HIGH 7.0 DOWNGRADE PDFsam Enhanced XLS File Insufficient UI Warning Remote Code Execution Vulnerability

FAQ

How do I fix enhanced vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is enhanced being exploited right now?

None of the tracked enhanced CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which enhanced CVE should I patch first?

CVE-2025-14401 currently ranks highest (33/100): PDFsam Enhanced App Out-Of-Bounds Read Remote Code Execution Vulnerability.

RSS feed for enhanced · ← Back to latest CVEs