CVEvulnerability

CVE-2025-14405

6.8 MEDIUM Published 2025-12-23 Modified 2026-10-19 Official page ↗
Status
Analyzed
Published
2025-12-23
Last modified
2026-10-19
Assigner
[email protected]
CVSS 3.1 ([email protected])
6.8 MEDIUM — CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 3.0 ([email protected])
6.6 MEDIUM — CVSS:3.0/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-427

Description

PDFsam Enhanced Uncontrolled Search Path Element Local Privilege Escalation Vulnerability. This vulnerability allows phyiscally-present attackers to escalate privileges on affected installations of PDFsam Enhanced. An attacker must first obtain the ability to mount a malicious drive onto the target system in order to exploit this vulnerability. The specific flaw exists within the configuration of OpenSSL. The product loads an OpenSSL configuration file from an unsecured location. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of SYSTEM. Was ZDI-CAN-27867.

Affected configurations

• pdfsam enhanced 7.0.76.15222

Related

Weakness · CWE (1)

  • CWE-427 Uncontrolled Search Path Element weakness

References