PatchTheCVEpdftron vulnerabilities
Recent CVEs affecting pdftron products. 2 tracked.
pdftron has 2 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 1. Most recent: 2022-03-10. Highest priority: CVE-2021-39307 (score 43/100).
- CVE-2022-24960 MEDIUM 6.5 DOWNGRADE A use after free vulnerability was discovered in PDFTron SDK version 9.2.0
- CVE-2021-39307 MEDIUM 6.1 UPGRADE PDFTron's WebViewer UI 8.0 or below renders dangerous URLs as hyperlinks in supported documents, including Jav
FAQ
How do I fix pdftron vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is pdftron being exploited right now?
None of the tracked pdftron CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which pdftron CVE should I patch first?
CVE-2021-39307 currently ranks highest (43/100): PDFTron's WebViewer UI 8.0 or below renders dangerous URLs as hyperlinks in supported documents, including Jav.