GO
Vendor
Gonitro
37
CVEs
0
On KEV
0
New 30D
Products
NP8.8
Nitro Pro
Gonitro
18 CVEs0 on KEV0 new
NI7.8
Nitropdf
Gonitro
8 CVEs0 on KEV0 new
NP8.4
Nitro Pdf Pro
Gonitro
7 CVEs0 on KEV0 new
NF5.5
Nitro Free Pdf Reader
Gonitro
2 CVEs0 on KEV0 new
NR5.3
Nitro Reader
Gonitro
2 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2025-66769 | NP Nitro Pdf Pro Gonitro | 7.5 | Apr 13 | A NULL pointer dereference in Nitro PDF Pro for Windows v14.41.1.4 allows attackers to cause a Denial of Service (DoS) via a crafted XFA packet |
| CVE-2025-69627 | NP Nitro Pdf Pro Gonitro | 8.4 | Apr 13 | Nitro PDF Pro for Windows 14.41.1.4 contains a heap use-after-free vulnerability in the implementation of the JavaScript method this.mailDoc() |
| CVE-2025-69624 | NP Nitro Pdf Pro Gonitro | 7.5 | Apr 13 | Nitro PDF Pro before 14.43 for Windows contains a NULL pointer dereference vulnerability in the JavaScript implementation of app.alert() |
| CVE-2025-67825 | NP Nitro Pdf Pro Gonitro | 5.5 | Jan 8 | An issue was discovered in Nitro PDF Pro for Windows before 14.42.0.34 |
| CVE-2021-21797 | NP Nitro Pro Gonitro | 7.8 | Oct 18 | An exploitable double-free vulnerability exists in the JavaScript implementation of Nitro Pro PDF |
| CVE-2021-21796 | NP Nitro Pro Gonitro | 7.8 | Oct 18 | An exploitable use-after-free vulnerability exists in the JavaScript implementation of Nitro Pro PDF |
| CVE-2021-21798 | NP Nitro Pro Gonitro | 7.8 | Sep 15 | An exploitable return of stack variable address vulnerability exists in the JavaScript implementation of Nitro Pro PDF |
| CVE-2018-18689 | NP Nitro Pro Gonitro | 5.3 | Jan 7 | The Portable Document Format (PDF) specification does not provide any information regarding the concrete procedure of how to validate signatures |
| CVE-2018-18688 | NP Nitro Pro Gonitro | 5.3 | Jan 7 | The Portable Document Format (PDF) specification does not provide any information regarding the concrete procedure of how to validate signatures |
| CVE-2020-6116 | NP Nitro Pro Gonitro | 7.8 | Sep 17 | An arbitrary code execution vulnerability exists in the rendering functionality of Nitro Software, Inc.’s Nitro Pro 13.13.2.242 |
| CVE-2020-6115 | NP Nitro Pro Gonitro | 7.8 | Sep 17 | An exploitable vulnerability exists in the cross-reference table repairing functionality of Nitro Software, Inc.’s Nitro Pro 13.13.2.242 |
| CVE-2020-6113 | NP Nitro Pro Gonitro | 7.8 | Sep 17 | An exploitable vulnerability exists in the object stream parsing functionality of Nitro Software, Inc.’s Nitro Pro 13.13.2.242 when updating its cross-reference table |
| CVE-2020-6112 | NP Nitro Pro Gonitro | 7.8 | Sep 17 | An exploitable code execution vulnerability exists in the JPEG2000 Stripe Decoding functionality of Nitro Software, Inc.’s Nitro Pro 13.13.2.242 when decoding sub-samples |
| CVE-2020-6146 | NP Nitro Pro Gonitro | 8.8 | Sep 16 | An exploitable code execution vulnerability exists in the rendering functionality of Nitro Pro 13.13.2.242 and 13.16.2.300 |
| CVE-2020-6093 | NP Nitro Pro Gonitro | 5.5 | May 18 | An exploitable information disclosure vulnerability exists in the way Nitro Pro 13.9.1.155 does XML error handling |
| CVE-2020-6092 | NP Nitro Pro Gonitro | 7.8 | May 18 | An exploitable code execution vulnerability exists in the way Nitro Pro 13.9.1.155 parses Pattern objects |
| CVE-2020-6074 | NP Nitro Pro Gonitro | 8.8 | May 18 | An exploitable code execution vulnerability exists in the PDF parser of Nitro Pro 13.9.1.155 |
| CVE-2020-10223 | NP Nitro Pro Gonitro | 8.1 | Mar 8 | npdf.dll in Nitro Pro before 13.13.2.242 is vulnerable to JBIG2Decode CNxJBIG2DecodeStream Heap Corruption at npdf!CAPPDAnnotHandlerUtils::create_popup_for_markup+0x12fbe via a… |
| CVE-2020-10222 | NP Nitro Pro Gonitro | 8.1 | Mar 8 | npdf.dll in Nitro Pro before 13.13.2.242 is vulnerable to Heap Corruption at npdf!nitro::get_property+2381 via a crafted PDF document |
| CVE-2013-2773 | NI Nitropdf Gonitro | 7.8 | Jan 14 | Nitro PDF 8.5.0.26: A specially crafted DLL file can facilitate Arbitrary Code Execution |
| CVE-2019-19819 | NI Nitropdf Gonitro | 5.5 | Jan 10 | The JBIG2Globals library in npdf.dll in Nitro Free PDF Reader 12.0.0.112 has a CAPPDAnnotHandlerUtils::PDAnnotHandlerDestroyData2+0x90ec NULL Pointer Dereference via crafted… |
| CVE-2019-19817 | NF Nitro Free Pdf Reader Gonitro | 5.5 | Jan 10 | The JBIG2Decode library in npdf.dll in Nitro Free PDF Reader 12.0.0.112 has a CAPPDAnnotHandlerUtils::PDAnnotHandlerDestroyData2+0x2e8a Out-of-Bounds Read via crafted Unicode… |
| CVE-2019-19818 | NF Nitro Free Pdf Reader Gonitro | 5.5 | Dec 16 | The JBIG2Decode library in npdf.dll in Nitro Free PDF Reader 12.0.0.112 has a CAPPDAnnotHandlerUtils::PDAnnotHandlerDestroyData2+0xa08a Out-of-Bounds Read via crafted Unicode… |
| CVE-2019-18958 | NP Nitro Pro Gonitro | 7.8 | Nov 21 | Nitro Pro before 13.2 creates a debug.log file in the directory where a .pdf file is located, if the .pdf document was produced by an OCR operation on the JPEG output of a scanner |
| CVE-2019-5053 | NI Nitropdf Gonitro | 7.8 | Oct 9 | An exploitable use-after-free vulnerability exists in the Length parsing function of NitroPDF |
| CVE-2019-5050 | NI Nitropdf Gonitro | 7.8 | Oct 9 | A specifically crafted PDF file can lead to a heap corruption when opened in NitroPDF 12.12.1.522 |
| CVE-2019-5048 | NI Nitropdf Gonitro | 7.8 | Oct 9 | A specifically crafted PDF file can lead to a heap corruption when opened in NitroPDF 12.12.1.522 |
| CVE-2019-5047 | NI Nitropdf Gonitro | 7.8 | Oct 9 | An exploitable Use After Free vulnerability exists in the CharProcs parsing functionality of NitroPDF |
| CVE-2019-5046 | NI Nitropdf Gonitro | 7.8 | Oct 9 | A specifically crafted jpeg2000 file embedded in a PDF file can lead to a heap corruption when opening a PDF document in NitroPDF 12.12.1.522 |
| CVE-2019-5045 | NI Nitropdf Gonitro | 7.8 | Oct 9 | A specifically crafted jpeg2000 file embedded in a PDF file can lead to a heap corruption when opening a PDF document in NitroPDF 12.12.1.522 |
| CVE-2017-7442 | NP Nitro Pro Gonitro | 8.8 | Aug 3 | Nitro Pro 11.0.3.173 allows remote attackers to execute arbitrary code via saveAs and launchURL calls with directory traversal sequences |
| CVE-2017-7950 | NP Nitro Pro Gonitro | 5.5 | Jul 7 | Nitro Pro 11.0.3 and earlier allows remote attackers to cause a denial of service (application crash) via a crafted PCX file |
| CVE-2016-8713 | NP Nitro Pdf Pro Gonitro | 7.8 | Feb 10 | A remote out of bound write / memory corruption vulnerability exists in the PDF parsing functionality of Nitro Pro 10.5.9.9 |
| CVE-2016-8711 | NP Nitro Pdf Pro Gonitro | 7.8 | Feb 10 | A potential remote code execution vulnerability exists in the PDF parsing functionality of Nitro Pro 10 |
| CVE-2016-8709 | NP Nitro Pdf Pro Gonitro | 7.8 | Feb 10 | A remote out of bound write / memory corruption vulnerability exists in the PDF parsing functionality of Nitro Pro 10 |