Live › vulnerability › CVE-2025-45528
Go to dashboardNitro PDF Pro for macOS version 14.7 has a flaw that lets a local attacker execute arbitrary code by supplying a crafted PDF file. The attacker gets code execution in the context of the user who opens the file.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Teams with macOS machines running Nitro PDF Pro version 14.7 are exposed, especially where users open PDFs from untrusted sources. The sources do not say whether other versions are affected or whether a patch exists.
No product ranges from the sources yet.
14.7Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
An issue in Nitro Software, Inc Nitro PDF Pro for macOS v.14.7 allows a local attacker to execute arbitrary code via a crafted PDF
This page as .md · .json · in your agent: get_signal("CVE-2025-45528")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.