Insufficient UI Warning in PDFsam Enhanced Allows Remote Code Execution

CVE-2025-14403

What is CVE-2025-14403?

An insufficient user interface warning in PDFsam Enhanced allows remote attackers to execute arbitrary code on affected systems. This vulnerability arises from the implementation of the Launch action, permitting dangerous scripts to be executed without adequate user warnings. To exploit this flaw, an attacker must lure the user into visiting a malicious webpage or opening a compromised file. Once executed, the code runs within the context of the current user's privileges, potentially leading to unauthorized access and manipulation of sensitive data.

References