vciy

PDF-XChange Editor: 54 records in one advisory

54 records announced together, published between 2023-01-26 and 2023-03-29, every one of them citing the same advisory.

The advisory

Every record in this batch cites https://www.tracker-software.com/product/pdf-xchange-editor/history. That is the CNA's own reference, held in the index, and it is why these records are on one page.

What the records offer

No record in this batch publishes a fixed version in held sources.

No record in this batch is listed by CISA in held sources.

8 of 54 records name something of its own. For the other 46, held sources say the same thing about each.

Most commonly mapped weakness across the batch: CWE-787: Out-of-bounds Write.

What this page does not cover

This batch is 54 of the 106 records that cite the same advisory. The other 52 are different findings announced alongside it.

38 of them are on the sibling batch linked below. The remaining 14 are grouped with nothing and have only their own record pages.

Other batches under the same advisory: tracker-software-history-c5080241ba

The batch is what one advisory announced. It is not every record sharing this weakness, this product or this mechanism, and nothing here is scoped to any estate.

Listed for shared announcement, not shared vulnerability. Each record here is its own finding with its own page, and fixing one does not address another.

CVE-2022-37349submitformCWE-125: Out-of-bounds Read
CVE-2022-37350collabCWE-125: Out-of-bounds Read
CVE-2022-37354no title heldCWE-787: Out-of-bounds Write
CVE-2022-37355no title heldCWE-787: Out-of-bounds Write
CVE-2022-37356no title heldCWE-787: Out-of-bounds Write
CVE-2022-37357ico icoCWE-787: Out-of-bounds Write
CVE-2022-37358no title heldCWE-787: Out-of-bounds Write
CVE-2022-37359no title heldCWE-416: Use After Free
CVE-2022-37362no title heldCWE-787: Out-of-bounds Write
CVE-2022-37363no title heldCWE-125: Out-of-bounds Read
CVE-2022-37364no title heldCWE-787: Out-of-bounds Write
CVE-2022-37365saveas application exposes interfaceCWE-749: Exposed Dangerous Method or Function
CVE-2022-37366no title heldCWE-125: Out-of-bounds Read
CVE-2022-37367acroforms acroformCWE-125: Out-of-bounds Read
CVE-2022-37369no title heldCWE-787: Out-of-bounds Write
CVE-2022-37371no title heldCWE-787: Out-of-bounds Write
CVE-2022-37372no title heldCWE-787: Out-of-bounds Write
CVE-2022-37374no title heldCWE-416: Use After Free
CVE-2022-41143no title heldCWE-787: Out-of-bounds Write
CVE-2022-41144no title heldCWE-787: Out-of-bounds Write
CVE-2022-41147no title heldCWE-787: Out-of-bounds Write
CVE-2022-41148no title heldCWE-787: Out-of-bounds Write
CVE-2022-41149no title heldCWE-787: Out-of-bounds Write
CVE-2022-41150no title heldCWE-125: Out-of-bounds Read
CVE-2022-41151no title heldCWE-787: Out-of-bounds Write
CVE-2022-41152no title heldCWE-125: Out-of-bounds Read
CVE-2022-42370no title heldCWE-787: Out-of-bounds Write
CVE-2022-42371no title heldCWE-787: Out-of-bounds Write
CVE-2022-42372no title heldCWE-125: Out-of-bounds Read
CVE-2022-42373no title heldCWE-787: Out-of-bounds Write
CVE-2022-42374no title heldCWE-416: Use After Free
CVE-2022-42377whichCWE-119: Improper Restriction of Operations…
CVE-2022-42378no title heldCWE-787: Out-of-bounds Write
CVE-2022-42379no title heldCWE-125: Out-of-bounds Read
CVE-2022-42380no title heldCWE-787: Out-of-bounds Write
CVE-2022-42381no title heldCWE-787: Out-of-bounds Write
CVE-2022-42382no title heldCWE-787: Out-of-bounds Write
CVE-2022-42394no title heldCWE-787: Out-of-bounds Write
CVE-2022-42395no title heldCWE-787: Out-of-bounds Write
CVE-2022-42396no title heldCWE-822: Untrusted Pointer Dereference
CVE-2022-42399no title heldCWE-125: Out-of-bounds Read
CVE-2022-42400no title heldCWE-787: Out-of-bounds Write
CVE-2022-42402embeddedCWE-125: Out-of-bounds Read
CVE-2022-42403no title heldCWE-122: Heap-based Buffer Overflow
CVE-2022-42405no title heldCWE-122: Heap-based Buffer Overflow
CVE-2022-42410pgm pgmCWE-787: Out-of-bounds Write
CVE-2022-42415no title heldCWE-787: Out-of-bounds Write
CVE-2022-42416no title heldCWE-787: Out-of-bounds Write
CVE-2022-42417no title heldCWE-125: Out-of-bounds Read
CVE-2022-42418no title heldCWE-822: Untrusted Pointer Dereference
CVE-2022-42419no title heldCWE-787: Out-of-bounds Write
CVE-2022-42420no title heldCWE-787: Out-of-bounds Write
CVE-2022-42421no title heldCWE-787: Out-of-bounds Write
CVE-2022-42423no title heldCWE-787: Out-of-bounds Write

54 records, read from the index as it stood on 2026-09-20. Every row opens the record it names, and every value on that record opens its own receipt.

Everything on this page is free. Public data. Withholding it protects nothing.