PatchSiren cyber security CVE debrief

CVE-2025-45528 Nitro Software, Inc CVE debrief

CVE-2025-45528 is a potential code execution issue in Nitro PDF Pro for macOS v.14.7. Defenders of systems using this software should assess exposure and prioritize verification. The CVE Program record and NIST NVD detail page provide limited information. This issue may allow local attackers to execute arbitrary code via a crafted PDF. Affected product deployments should be identified in managed environments, and owners should be assigned for follow-up. Official advisories or CVE records should be reviewed to validate affected scope, severity, and vendor guidance.

Vendor: Nitro Software, Inc
Product: Nitro PDF Pro
CVSS: Unknown
CISA KEV: Not listed in stored evidence
Original CVE published: 2026-10-23
Original CVE updated: 2026-10-29
Advisory published: 2026-10-23
Advisory updated: 2026-10-29

Who should care

Defenders of systems using Nitro PDF Pro for macOS v.14.7 should assess exposure and prioritize verification. This includes operators, platform administrators, vulnerability management teams, and security teams. They should review the supplied official advisory or CVE record to validate affected scope, severity, and vendor guidance. Exposure review and compensating controls are recommended for exposed systems while

Why it matters

CVE-2025-45528 is a potential code execution issue in Nitro PDF Pro for macOS v.14.7; defenders should assess exposure and prioritize verification.

Potential code execution requires verification
Assess exposure of Nitro PDF Pro for macOS v.14.7
Prioritize verification of affected systems

Technical summary

CVE-2025-45528 is a potential code execution issue in Nitro PDF Pro for macOS v.14.7. The vulnerability may allow local attackers to execute arbitrary code via a crafted PDF. Defenders should assess exposure and prioritize verification. The CVE Program record and NIST NVD detail page provide limited information on this issue. Affected systems should be reviewed for potential code execution attempts, and compensating controls should be considered for exposed systems.

Defensive priority

Assess exposure, prioritize verification

Recommended defensive actions

Assess exposure to Nitro PDF Pro for macOS v.14.7
Prioritize verification of affected systems
Monitor for potential code execution attempts

Evidence notes

Official CVE Program record and NIST NVD detail page provide limited information on CVE-2025-45528, a potential code execution issue in Nitro PDF Pro for macOS v.14.7.

Sources and references

Verified primary and authoritative sources

CVE-2025-45528 CVE Program record
Publisher, destination, and source semantics verified

URL: https://www.cve.org/CVERecord?id=CVE-2025-45528

CVE Program - Official CVE Program record with source-provided CVE metadata.
CVE-2025-45528 NVD vulnerability detail
Publisher, destination, and source semantics verified

URL: https://nvd.nist.gov/vuln/detail/CVE-2025-45528

NIST National Vulnerability Database - Official NIST NVD detail page and source-specific vulnerability assessment.

Supplemental references

CVE-2025-45528
Unverified legacy reference

URL: https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/45xxx/CVE-2025-45528.json

cve_program_cvelist_v5
Source reference
Unverified legacy reference

URL: https://gist.github.com/momenbasel/66e33613a52f6f59e49ee8ca6ea91a61

Supplemental source

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.