PD
Product
Pdfbox
by Apache · last CVE Apr 14, 2026
9
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 1Medium 7Low 0
Watch

Add Pdfbox to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2018-8036
6.5
5%
Jul 3
In Apache PDFBox 1.8.0 to 1.8.14 and 2.0.0RC1 to 2.0.10, a carefully crafted (or fuzzed) file can trigger an infinite loop which leads to an out of memory exception in Apache…
Affected: after 1.8.0 through 1.8.14; 2.0.0 through 2.0.10; 2.0.0; 2.0.0; 2.0.0
CVE-2021-31812
5.5
3%
Jun 12
In Apache PDFBox, a carefully crafted PDF file can trigger an infinite loop while loading the file
Affected: 2.0.0 through 2.0.23
CVE-2021-31811
5.5
4%
Jun 12
In Apache PDFBox, a carefully crafted PDF file can trigger an OutOfMemory-Exception while loading the file
Affected: 2.0.0 through 2.0.23
CVE-2021-27906
5.5
3%
Mar 19
A carefully crafted PDF file can trigger an OutOfMemory-Exception while loading the file
Affected: 2.0.0 through 2.0.22
CVE-2021-27807
5.5
3%
Mar 19
A carefully crafted PDF file can trigger an infinite loop while loading the file
Affected: 2.0.0 through 2.0.22
CVE-2018-11797
5.5
4%
Oct 5
In Apache PDFBox 1.8.0 to 1.8.15 and 2.0.0RC1 to 2.0.11, a carefully crafted PDF file can trigger an extremely long running computation when parsing the page tree
Affected: 1.8.0 through 1.8.15; 2.0.1 through 2.0.11; 2.0; 2.0; 2.0; 2.0.0
CVE-2026-33929
4.3
1%
Apr 14
Apache PDFBox Examples: Path Traversal in PDFBox ExtractEmbeddedFiles Example Code
Affected: 2.0.24 before 2.0.37; 3.0.0 before 3.0.8
Showing 7