---
id: CVE-2025-45528
title: >-
  An issue in Nitro Software, Inc Nitro PDF Pro for macOS v.14.7 allows a local
  attacker to execute arbitrary code via a crafted PDF
summary: >-
  An issue in Nitro Software, Inc Nitro PDF Pro for macOS v.14.7 allows a local
  attacker to execute arbitrary code via a crafted PDF
severity: high
cvss: 7.3
cvssVector: 'CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H'
cvssSource: adp
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: total
  timestamp: '2026-10-29T02:42:51.588297Z'
published: '2026-10-23'
updated: '2026-10-29'
sourceUpdated: '2026-10-29T02:43:32.846Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2025-45528'
references:
  - url: 'http://nitro.com'
  - url: 'https://gist.github.com/momenbasel/66e33613a52f6f59e49ee8ca6ea91a61'
tags:
  - cve.org
epss: 0.00162
epssPercentile: 0.05368
ingestedAt: '2026-10-23T16:31:11.326Z'
---

## Overview

An issue in Nitro Software, Inc Nitro PDF Pro for macOS v.14.7 allows a local attacker to execute arbitrary code via a crafted PDF

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.