Vendor
veraPDF
7 known vulnerabilities in products by veraPDF, 0 of them actively exploited (CISA KEV).
Key figures
7
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
0
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2026-54079 | veraPDF Validation XXE via XFA | — | |
| High | CVE-2026-54078 | veraPDF Validation XXE via Rich Text | — | |
| High | CVE-2024-28109 | Potential XSLT injection vulnerability when using policy files | 8.1 | |
| Medium | CVE-2026-54080 | veraPDF Parser DoS via PostScript CMap Streams | — | |
| Medium | CVE-2026-54081 | veraPDF Parser DoS via PostScript Type 1 Font Programs | — | |
| Medium | CVE-2026-54082 | veraPDF-validation: Improper Restriction of XML External Entity Reference | 6.5 | |
| Low | CVE-2024-52800 | Potential XXE (XML External Entity Injection) vulnerability in veraPDF CLI | — |
Products
| veraPDF-validation | 3 | 0 |