SecAlerts
l

lulu software

Security Risk Profile

52
/100
medium

Security Risk Score

Comprehensive risk assessment based on 16 vulnerabilities, EPSS scores, exploitation status, and remediation availability.

📅 Data spans from December 11, 2025 to present

16
Total CVEs
11
Critical+High
0
Exploited
11
Unpatched

Threat Assessment

Avg CVSS
6.3
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
11
Critical/High
Risk Level
52/100
medium

Severity Distribution

Critical
0
High
11
Medium
0
Low
5

Exploit Likelihood

>50% chance
0
20-50%
0
5-20%
0
<5%
0

Age Distribution

Common Weaknesses (CWE)

1
Path Traversal
1

Most Affected Products

1. LULU Software Soda PDF Desktop16
2. Soda PDF Desktop16
3. Sodapdf Soda Pdf Desktop2

Recent Vulnerabilities

See more →
CVE-2025-14414
CVSS 7.8high

(0Day) Soda PDF Desktop Word File Insufficient UI Warning Remote Code Execution Vulnerability

Dec 23, 2025🔧 No Patch
CVE-2025-14413
CVSS 7.8high

(0Day) Soda PDF Desktop CBZ File Parsing Directory Traversal Remote Code Execution Vulnerability

Dec 23, 2025🔧 No Patch
ZDI-CAN-27509
CVSS 7.8high

ZDI-25-1086: (0Day) Soda PDF Desktop CBZ File Parsing Directory Traversal Remote Code Execution Vulnerability

Dec 11, 2025🔧 No Patch
ZDI-CAN-27495
CVSS 7.8high

ZDI-25-1085: (0Day) Soda PDF Desktop XLS File Insufficient UI Warning Remote Code Execution Vulnerability

Dec 11, 2025🔧 No Patch
ZDI-CAN-27140
CVSS 3.3low

ZDI-25-1084: (0Day) Soda PDF Desktop PDF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

Dec 11, 2025🔧 No Patch
ZDI-25-1081
CVSS 3.3low

(0Day) Soda PDF Desktop PDF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

Dec 11, 2025🔧 No Patch
ZDI-CAN-27141
CVSS 3.3low

ZDI-25-1080: (0Day) Soda PDF Desktop PDF File Parsing Memory Corruption Information Disclosure Vulnerability

Dec 11, 2025🔧 No Patch
ZDI-25-1084
CVSS 3.3low

(0Day) Soda PDF Desktop PDF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

Dec 11, 2025🔧 No Patch
ZDI-25-1087
CVSS 7.8high

(0Day) Soda PDF Desktop Word File Insufficient UI Warning Remote Code Execution Vulnerability

Dec 11, 2025🔧 No Patch
ZDI-CAN-27496
CVSS 7.8high

ZDI-25-1087: (0Day) Soda PDF Desktop Word File Insufficient UI Warning Remote Code Execution Vulnerability

Dec 11, 2025🔧 No Patch

Monitor lulu software in Real-Time

Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.

Powered bySecAlerts

Monitor Your Software Stack in Real-Time

Get instant alerts when vulnerabilities are discovered in your software stack. Stay ahead of security threats with SecAlerts.

© 2026 SecAlerts Pty Ltd. All rights reserved.