CVE-2018-25217CWE-787

PDF Explorer 1.5.66.2 Structured Exception Handler Local Code Execution

High · published March 26, 2026

CVSS v4.0
8.6
EPSS
0%
Percentile
11.7
In the wild
Unconfirmed
What it is

PDF Explorer 1.5.66.2 contains a structured exception handler (SEH) overflow vulnerability that allows local attackers to execute arbitrary code by overwriting SEH records with malicious data. Attackers can craft a payload with buffer overflow, NSEH jump, and ROP gadget chains that execute when the Custom fields settings dialog processes the malicious input in the Label field.

The record
Technical detail
CVSS v4.0
8.6 · HIGH
Vector
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS
0.00220 · 11.7th percentile
Weakness
CWE-787 · Out-of-bounds Write
Published
2026-03-26T13:24Z
EPSS history
Timeline
  • 26 MAR 13:24Z
    PDF Explorer 1.5.66.2 Structured Exception Handler Local Code Execution
    cvelistv5