Sploitus

11 exploited vulnerabilities in Pdf.Js

Vulnerabilities with publicly known exploits

Vendors
Mozilla, Alt Linux, Almalinux, Astra Linux, Centos, Atlassian
With known exploits
11
Affected Mozilla Firefox versions
< 115.11.0, 126.0, 31.5.3, 36.0.4
Affected Mozilla Thunderbird versions
< 115.11.0, 31.5
Affected Publiccms versions
< 5.202506.b

Vulnerabilities with exploits

Highest CVSS first — 3 of these already have exploit code on Sploitus

CVE-2024-52300
CVSS 9.0 CRITICAL 2024-11-13FIX AVAILABLE
CVE-2024-4367 16 exploits
CVSS 8.8 HIGH 2023-10-30FIX AVAILABLE
Exploit for Improper Check for Unusual or Exceptional Conditions in Mozilla FirefoxExploit for Improper Check for Unusual or Exceptional Conditions in Mozilla Firefox
CVE-2024-52298
CVSS 7.8 HIGH 2024-11-13FIX AVAILABLE
CVE-2024-30263
CVSS 7.7 HIGH 2024-04-04FIX AVAILABLE
CVE-2015-2743
CVSS 7.5 HIGH 2015-07-02FIX AVAILABLE
CVE-2024-34342 1 exploit
CVSS 7.1 HIGH 2024-05-07FIX AVAILABLE
Exploit for Improper Check for Unusual or Exceptional Conditions in Mozilla Firefox
CVE-2025-47943
CVSS 6.3 MEDIUM 2025-06-24FIX AVAILABLE
CVE-2025-7953
CVSS 6.1 MEDIUM 2025-07-22FIX AVAILABLE
CVE-2021-45086
CVSS 6.1 MEDIUM 2021-12-16FIX AVAILABLE
CVE-2024-6938
CVSS 5.4 MEDIUM 2024-07-21
CVE-2015-0816 4 exploits
CVSS 5.0 MEDIUM 2015-03-31FIX AVAILABLE
Mozilla Firefox - 'pdf.js' Privileged JavaScript Injection (Metasploit)Firefox PDF.js Privileged Javascript Injection Exploit