PatchTheCVEsoda pdf desktop vulnerabilities and fixes
Recent CVEs affecting soda pdf desktop, with upgrade or downgrade steps. 2 tracked.
Also searched as: sodapdfdesktop.
soda pdf desktop has 2 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2025-12-23. Highest priority: CVE-2025-14413 (score 37/100).
- CVE-2025-14413 HIGH 7.8 DOWNGRADE Soda PDF Desktop CBZ File Parsing Directory Traversal Remote Code Execution Vulnerability
- CVE-2025-14414 HIGH 7.8 DOWNGRADE Soda PDF Desktop Word File Insufficient UI Warning Remote Code Execution Vulnerability
FAQ
How do I fix soda pdf desktop vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is soda pdf desktop being exploited right now?
None of the tracked soda pdf desktop CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which soda pdf desktop CVE should I patch first?
CVE-2025-14413 currently ranks highest (37/100): Soda PDF Desktop CBZ File Parsing Directory Traversal Remote Code Execution Vulnerability.