CVE-2025-14402CWE-356

CVE-2025-14402

High · published December 24, 2025

CVSS v3.0
7.0
EPSS
0%
Percentile
17.0
In the wild
Unconfirmed
What it is

⚡ A DOC file could become a hidden trap, executing any code an attacker wants without a peep from your security system! 🎭 This vulnerability is like a restaurant serving a dish prepared with a secret ingredient that nobody is aware of—once it's on your plate, it can turn a delightful meal into a disastrous experience! 🍽️ An attacker could gain control over your system, running any code they choose in the context of the current user. This could lead to unauthorized access to sensitive information, installation of malware, or even complete system compromise if the user is unsuspecting. Absolutely devastating!

Put simply

This vulnerability is like a restaurant serving a dish prepared with a secret ingredient that nobody is aware of—once it's on your plate, it can turn a delightful meal into a disastrous experience! 🍽️ The flaw exists in PDFsam Enhanced's handling of DOC files, where it permits the execution of malicious scripts without any user warnings, resulting in potential remote code execution with user interaction required.

What to do

An attacker could gain control over your system, running any code they choose in the context of the current user. This could lead to unauthorized access to sensitive information, installation of malware, or even complete system compromise if the user is unsuspecting. Absolutely devastating! To secure your installations, ensure you’re running the latest version of PDFsam Enhanced, where this vulnerability is patched. Educate users to avoid opening untrusted DOC files and consider employing robust security solutions to filter malicious content. 🛡️ You've got this! By taking these steps, you can safeguard your system and keep those pesky attackers at bay! 💪✨

The record
Technical detail
CVSS v3.0
7.0 · HIGH
Vector
CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00262 · 17.0th percentile
Weakness
CWE-356 · Product UI does not Warn User of Unsafe Actions
Published
2025-12-24T03:15Z
Affected products (1)
ProductVersionsFixed in
pdfsam/enhancedall versions—
References (1)
EPSS history
Timeline
  • 23 DEC 21:21Z
    PDFsam Enhanced DOC File Insufficient UI Warning Remote Code Execution Vulnerability
    cvelistv5