PatchTheCVEpdfpatcher vulnerabilities and fixes
Recent CVEs affecting pdfpatcher, with upgrade or downgrade steps. 2 tracked.
pdfpatcher has 2 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 2. Most recent: 2025-11-17. Highest priority: CVE-2025-63917 (score 39/100).
- CVE-2025-63918 MEDIUM 6.2 UPGRADE PDFPatcher executable does not validate user-supplied file paths, allowing directory traversal attacks allowin
- CVE-2025-63917 HIGH 7.1 UPGRADE PDFPatcher thru 1.1.3.4663 executable's XML bookmark import functionality does not restrict XML external entit
FAQ
How do I fix pdfpatcher vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is pdfpatcher being exploited right now?
None of the tracked pdfpatcher CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which pdfpatcher CVE should I patch first?
CVE-2025-63917 currently ranks highest (39/100): PDFPatcher thru 1.1.3.4663 executable's XML bookmark import functionality does not restrict XML external entit.