Remote Code Execution Vulnerability in PDFsam Enhanced by PDFsam

CVE-2025-14404

What is CVE-2025-14404?

A vulnerability found in PDFsam Enhanced involves insufficient user interface warnings during the processing of XLS files. This flaw permits remote attackers to execute arbitrary code on affected systems. Exploitation requires user interaction, necessitating that the target visits a malicious webpage or opens a compromised XLS file. The vulnerability stems from a failure to adequately warn users about the execution of potentially harmful scripts, allowing attackers to execute code in the context of the currently logged-in user.

References