What’s Vulnerable › Products

PDF.js Viewer vulnerabilities

3 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 0 published in the last 12 months.

Check whether your PDF.js Viewer version is affected

Latest PDF.js Viewer vulnerabilities

• CVE-2024-34342 — react-pdf's PDF.js vulnerable to arbitrary JavaScript execution upon opening a malicious PDF (CVSS 7.1)
• CVE-2022-4670 — PDF.js Viewer < 2.1.8 - Contributor+ Stored XSS via Shortcode (CVSS 5.4)
• CVE-2021-24759 — PDF.js Viewer < 2.0.2 - Contributor+ Stored Cross-Site Scripting (CVSS 5.4)