Remote Code Execution Flaw in Soda PDF Desktop XLS File Handling

CVE-2025-14412

What is CVE-2025-14412?

A vulnerability has been identified in Soda PDF Desktop that relates to insufficient user warnings when handling XLS files. This flaw allows remote attackers to execute arbitrary code if a user interacts with a malicious file or web page. The vulnerability arises from the application's inability to adequately warn users about executing unsafe scripts, which can lead to significant security risks. Protect your systems by taking necessary precautions and staying updated on available patches.

References