Nitro — Vulnerabilities & Security Advisories 3

Nitro is a document productivity suite primarily used for creating, editing, and converting PDF files. Historically, vulnerabilities in Nitro have included remote code execution, cross-site scripting, and privilege escalation, often stemming from insecure parsing of PDF files or improper input validation. The product has faced security scrutiny, with three CVEs recorded to date, highlighting risks in its handling of embedded objects and web components. While no major public incidents have been widely reported, the consistent presence of memory corruption flaws in its parsing engine suggests potential for exploitation, particularly in environments where untrusted PDF processing occurs.