Login Request a demo
PD
Product
Pdfbox
by Apache · last CVE Apr 14, 2026
9
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities9In the news0Timeline
Severity mix
Critical 1High 1Medium 7Low 0
Severity
All severities9Critical1High1Medium7Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Pdfbox to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2019-0228
9.8
9%
Apr 17
Apache PDFBox 2.0.14 does not properly initialize the XML parser, which allows context-dependent attackers to conduct XML External Entity (XXE) attacks via a crafted XFDF
Affected: 2.0.14
CVE-2016-2175
7.8
4%
Jun 1
Apache PDFBox before 1.8.12 and 2.x before 2.0.1 does not properly initialize the XML parsers, which allows context-dependent attackers to conduct XML External Entity (XXE)…
Affected: 1.8.0; 1.8.1; 1.8.2; 1.8.3; 1.8.4; 1.8.5; +10 more
CVE-2018-8036
6.5
5%
Jul 3
In Apache PDFBox 1.8.0 to 1.8.14 and 2.0.0RC1 to 2.0.10, a carefully crafted (or fuzzed) file can trigger an infinite loop which leads to an out of memory exception in Apache…
Affected: after 1.8.0 through 1.8.14; 2.0.0 through 2.0.10; 2.0.0; 2.0.0; 2.0.0
CVE-2021-31812
5.5
3%
Jun 12
In Apache PDFBox, a carefully crafted PDF file can trigger an infinite loop while loading the file
Affected: 2.0.0 through 2.0.23
CVE-2021-31811
5.5
4%
Jun 12
In Apache PDFBox, a carefully crafted PDF file can trigger an OutOfMemory-Exception while loading the file
Affected: 2.0.0 through 2.0.23
CVE-2021-27906
5.5
3%
Mar 19
A carefully crafted PDF file can trigger an OutOfMemory-Exception while loading the file
Affected: 2.0.0 through 2.0.22
CVE-2021-27807
5.5
3%
Mar 19
A carefully crafted PDF file can trigger an infinite loop while loading the file
Affected: 2.0.0 through 2.0.22
CVE-2018-11797
5.5
4%
Oct 5
In Apache PDFBox 1.8.0 to 1.8.15 and 2.0.0RC1 to 2.0.11, a carefully crafted PDF file can trigger an extremely long running computation when parsing the page tree
Affected: 1.8.0 through 1.8.15; 2.0.1 through 2.0.11; 2.0; 2.0; 2.0; 2.0.0
CVE-2026-33929
4.3
1%
Apr 14
Apache PDFBox Examples: Path Traversal in PDFBox ExtractEmbeddedFiles Example Code
Affected: 2.0.24 before 2.0.37; 3.0.0 before 3.0.8
Showing 9