# Sodapdf vulnerabilities

Source: https://junglewise.ai/threats/vendors/sodapdf  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Updated: 9 November 2026, 03:07 UTC. Rebuilt every hour.  
Data: https://junglewise.ai/threats/vendors/sodapdf.json  
License: CC BY 4.0 with a link back

Junglewise Threat Intelligence has tracked 10 vulnerabilities in Sodapdf: 0 in the last 7 days and 0 in the last 90 days, 0 of them critical and 0 exploited in the wild. The most recent, CVE-2025-14415, was published on 23 December 2025. 1 technology has a page of its own.

## Counts

- Last 7 days: 0
- Last 30 days: 0
- Last 90 days: 0
- All time: 10 (0 critical, 0 exploited in the wild)

## About Sodapdf

PDF editing and conversion software for creating and modifying PDF files.

## Latest Sodapdf vulnerabilities

- [CVE-2025-14415: Soda PDF Desktop Launch Insufficient UI Warning Remote Code Execution Vulnerability. This vulnerability allows remote…](https://junglewise.ai/threats/cve-2025-14415-soda-pdf-desktop-launch-insufficient-ui-warning-remote-code) (high, CVSS 7.8, published 23 Dec 2025)
- [CVE-2025-14414: Soda PDF Desktop Word File Insufficient UI Warning Remote Code Execution Vulnerability. This vulnerability allows…](https://junglewise.ai/threats/cve-2025-14414-soda-pdf-desktop-word-file-insufficient-ui-warning-remote-code) (high, CVSS 7.8, published 23 Dec 2025)
- [CVE-2025-14413: Soda PDF Desktop CBZ File Parsing Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows…](https://junglewise.ai/threats/cve-2025-14413-soda-pdf-desktop-cbz-file-parsing-directory-traversal-remote-code) (high, CVSS 7.8, published 23 Dec 2025)
- [CVE-2025-14412: Soda PDF Desktop XLS File Insufficient UI Warning Remote Code Execution Vulnerability. This vulnerability allows…](https://junglewise.ai/threats/cve-2025-14412-soda-pdf-desktop-xls-file-insufficient-ui-warning-remote-code) (high, CVSS 7.8, published 23 Dec 2025)
- [CVE-2025-14411: Soda PDF Desktop PDF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows…](https://junglewise.ai/threats/cve-2025-14411-soda-pdf-desktop-pdf-file-parsing-out-of-bounds-read-information) (medium, CVSS 5.5, published 23 Dec 2025)
- [CVE-2025-14410: Soda PDF Desktop PDF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows…](https://junglewise.ai/threats/cve-2025-14410-soda-pdf-desktop-pdf-file-parsing-out-of-bounds-read-information) (medium, CVSS 5.5, published 23 Dec 2025)
- [CVE-2025-14409: Soda PDF Desktop PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows…](https://junglewise.ai/threats/cve-2025-14409-soda-pdf-desktop-pdf-file-parsing-out-of-bounds-write-remote-code) (high, CVSS 7.8, published 23 Dec 2025)
- [CVE-2025-14408: Soda PDF Desktop PDF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows…](https://junglewise.ai/threats/cve-2025-14408-soda-pdf-desktop-pdf-file-parsing-out-of-bounds-read-information) (low, CVSS 3.3, published 23 Dec 2025)
- [CVE-2025-14407: Soda PDF Desktop PDF File Parsing Memory Corruption Information Disclosure Vulnerability. This vulnerability allows…](https://junglewise.ai/threats/cve-2025-14407-soda-pdf-desktop-pdf-file-parsing-memory-corruption-information) (medium, CVSS 5.5, published 23 Dec 2025)
- [CVE-2025-14406: Soda PDF Desktop Uncontrolled Search Path Element Local Privilege Escalation Vulnerability. This vulnerability allows…](https://junglewise.ai/threats/cve-2025-14406-soda-pdf-desktop-uncontrolled-search-path-element-local-privilege) (high, CVSS 7.8, published 23 Dec 2025)

## Most severe Sodapdf vulnerabilities

- [CVE-2025-14413: Soda PDF Desktop CBZ File Parsing Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows…](https://junglewise.ai/threats/cve-2025-14413-soda-pdf-desktop-cbz-file-parsing-directory-traversal-remote-code) (high, CVSS 7.8, published 23 Dec 2025)
- [CVE-2025-14415: Soda PDF Desktop Launch Insufficient UI Warning Remote Code Execution Vulnerability. This vulnerability allows remote…](https://junglewise.ai/threats/cve-2025-14415-soda-pdf-desktop-launch-insufficient-ui-warning-remote-code) (high, CVSS 7.8, published 23 Dec 2025)
- [CVE-2025-14414: Soda PDF Desktop Word File Insufficient UI Warning Remote Code Execution Vulnerability. This vulnerability allows…](https://junglewise.ai/threats/cve-2025-14414-soda-pdf-desktop-word-file-insufficient-ui-warning-remote-code) (high, CVSS 7.8, published 23 Dec 2025)
- [CVE-2025-14412: Soda PDF Desktop XLS File Insufficient UI Warning Remote Code Execution Vulnerability. This vulnerability allows…](https://junglewise.ai/threats/cve-2025-14412-soda-pdf-desktop-xls-file-insufficient-ui-warning-remote-code) (high, CVSS 7.8, published 23 Dec 2025)
- [CVE-2025-14409: Soda PDF Desktop PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows…](https://junglewise.ai/threats/cve-2025-14409-soda-pdf-desktop-pdf-file-parsing-out-of-bounds-write-remote-code) (high, CVSS 7.8, published 23 Dec 2025)
- [CVE-2025-14406: Soda PDF Desktop Uncontrolled Search Path Element Local Privilege Escalation Vulnerability. This vulnerability allows…](https://junglewise.ai/threats/cve-2025-14406-soda-pdf-desktop-uncontrolled-search-path-element-local-privilege) (high, CVSS 7.8, published 23 Dec 2025)
- [CVE-2025-14411: Soda PDF Desktop PDF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows…](https://junglewise.ai/threats/cve-2025-14411-soda-pdf-desktop-pdf-file-parsing-out-of-bounds-read-information) (medium, CVSS 5.5, published 23 Dec 2025)
- [CVE-2025-14410: Soda PDF Desktop PDF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows…](https://junglewise.ai/threats/cve-2025-14410-soda-pdf-desktop-pdf-file-parsing-out-of-bounds-read-information) (medium, CVSS 5.5, published 23 Dec 2025)
- [CVE-2025-14407: Soda PDF Desktop PDF File Parsing Memory Corruption Information Disclosure Vulnerability. This vulnerability allows…](https://junglewise.ai/threats/cve-2025-14407-soda-pdf-desktop-pdf-file-parsing-memory-corruption-information) (medium, CVSS 5.5, published 23 Dec 2025)
- [CVE-2025-14408: Soda PDF Desktop PDF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows…](https://junglewise.ai/threats/cve-2025-14408-soda-pdf-desktop-pdf-file-parsing-out-of-bounds-read-information) (low, CVSS 3.3, published 23 Dec 2025)

## Vulnerabilities per week

Nothing was published in the last eight weeks.

| Week of | Vulns | Critical | Exploited |
| --- | --- | --- | --- |
| 17 Aug 2026 | 0 | 0 | 0 |
| 24 Aug 2026 | 0 | 0 | 0 |
| 31 Aug 2026 | 0 | 0 | 0 |
| 7 Sep 2026 | 0 | 0 | 0 |
| 14 Sep 2026 | 0 | 0 | 0 |
| 21 Sep 2026 | 0 | 0 | 0 |
| 28 Sep 2026 | 0 | 0 | 0 |
| 5 Oct 2026 | 0 | 0 | 0 |
| 12 Oct 2026 | 0 | 0 | 0 |
| 19 Oct 2026 | 0 | 0 | 0 |
| 26 Oct 2026 | 0 | 0 | 0 |
| 2 Nov 2026 | 0 | 0 | 0 |
| 9 Nov 2026 | 0 | 0 | 0 |

## Sodapdf technologies

- [Sodapdf Soda Pdf](https://junglewise.ai/threats/technologies/soda-pdf): 8 vulnerabilities

## Sources

NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories. Rebuilt every hour. Cite as: Junglewise Threat Intelligence, "Sodapdf vulnerabilities", https://junglewise.ai/threats/vendors/sodapdf, 9 November 2026.