{"id":"CVE-2025-45528","kind":"vulnerability","aliases":["CVE-2025-45528"],"related":[],"title":"Nitro PDF Pro for macOS: crafted PDF lets a local attacker run code","description":"An issue in Nitro Software, Inc Nitro PDF Pro for macOS v.14.7 allows a local attacker to execute arbitrary code via a crafted PDF","summary":"Nitro PDF Pro for macOS version 14.7 has a flaw that lets a local attacker execute arbitrary code by supplying a crafted PDF file. The attacker gets code execution in the context of the user who opens the file.","severity":"unknown","cvss":null,"epss":0.00207,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["desktop","macos","nitro-pdf-pro","package"],"not_affected_if":["other-pdf-reader"],"how_to_check":"- Open Nitro PDF Pro and check its version under the About menu, looking for `14.7`\n- unknown","fix":"- unknown","status":"open","published_at":"2026-10-23T16:16:50+00:00","first_seen_at":"2026-10-23T21:57:34+00:00","triaged_at":"2026-10-25T04:52:09+00:00","updated_at":"2026-10-25T12:38:50+00:00","category":"package","confidence":0.5,"triage":{"at":"2026-10-25T04:52:09Z","model":"claude-haiku-5-5","output":{"fix":"- unknown","reach":"local","title":"Nitro PDF Pro for macOS: crafted PDF lets a local attacker run code","impact":"high","summary":"Nitro PDF Pro for macOS version 14.7 has a flaw that lets a local attacker execute arbitrary code by supplying a crafted PDF file. The attacker gets code execution in the context of the user who opens the file.","category":"package","nicknames":[],"who_cares":["macos","nitro-pdf-pro","desktop"],"confidence":0.5,"needs_auth":"no","worst_case":"Code runs as the user who opens the crafted PDF","analyst_note":"Check the Nitro vendor advisory and NVD for the fixed version and whether the flaw has a specific trigger in the PDF parser.","how_to_check":"- Open Nitro PDF Pro and check its version under the About menu, looking for `14.7`\n- unknown","needs_analyst":true,"not_affected_if":["other-pdf-reader"],"who_is_affected":"Teams with macOS machines running Nitro PDF Pro version 14.7 are exposed, especially where users open PDFs from untrusted sources. The sources do not say whether other versions are affected or whether a patch exists.","user_interaction":"yes","needs_special_setup":"unknown","severity_if_unknown":"high"},"cost_usd":0.000559,"input_tokens":3282,"output_tokens":462,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-2025':15A,18A '-45528':16A,19A '14.7':33B 'allow':78C 'arbitrari':43B,84C 'attack':11A,41B,52B,81C 'code':13A,44B,54B,85C 'context':58B 'craft':6A,48B,88C 'cve':14A,17A 'desktop':20B 'execut':42B,55B,83C 'file':50B,65B 'flaw':36B 'get':53B 'inc':71C 'issu':67C 'let':8A,38B 'local':10A,40B,80C 'maco':5A,21B,31B,76C 'nitro':1A,23B,27B,69C,72C 'nitro-pdf-pro':22B 'open':63B 'packag':26B 'pdf':2A,7A,24B,28B,49B,73C,89C 'pro':3A,25B,29B,74C 'run':12A 'softwar':70C 'suppli':46B 'user':61B 'v.14.7':77C 'version':32B 'via':86C","nicknames":[],"mitigations":[],"who_affected":"Teams with macOS machines running Nitro PDF Pro version 14.7 are exposed, especially where users open PDFs from untrusted sources. The sources do not say whether other versions are affected or whether a patch exists.","tier":"C","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-23T16:16:50+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2025-45528","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-45528","severity":null,"published_at":"2026-10-23T16:16:50+00:00","modified_at":"2026-10-23T19:43:46+00:00","first_seen_at":"2026-10-23T21:57:34+00:00","fetched_at":"2026-10-23T22:29:03+00:00","note":null},{"source":"epss","external_id":"CVE-2025-45528","url":"https://api.first.org/data/v1/epss?cve=CVE-2025-45528","severity":null,"published_at":null,"modified_at":null,"first_seen_at":"2026-10-25T12:38:50+00:00","fetched_at":"2026-10-25T12:38:50+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}