Product by Apache Software Foundation
Apache PDFBox
9 known vulnerabilities in Apache PDFBox (Apache Software Foundation), 0 of them actively exploited (CISA KEV).
Key figures
9
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
1
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2019-0228 | Apache PDFBox: XML External Entity (XXE) | 9.8 | |
| High | CVE-2016-2175 | Apache Software Foundation PDFBox: XML External Entity (XXE) | 7.8 | |
| Medium | CVE-2018-8036 | Apache PDFBox: Infinite Loop | 6.5 | |
| Medium | CVE-2021-31811 | A carefully crafted PDF file can trigger an OutOfMemory-Exception while loading a tiny file | 5.5 | |
| Medium | CVE-2018-11797 | Apache PDFBox: security vulnerability | 5.5 | |
| Medium | CVE-2021-27906 | A carefully crafted PDF file can trigger an OutOfMemory-Exception while loading the file | 5.5 | |
| Medium | CVE-2021-31812 | A carefully crafted PDF file can trigger an infinite loop while loading the file | 5.5 | |
| Medium | CVE-2021-27807 | A carefully crafted PDF file can trigger an infinite loop while loading the file | 5.5 | |
| Medium | CVE-2026-33929 | Apache PDFBox Examples: Path Traversal in PDFBox ExtractEmbeddedFiles Example Code | 4.3 |