<?xml version="1.0" encoding="utf-8" standalone="yes"?>
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom">
  <channel>
    <title>PDFsam on 办公AI智能小助手</title>
    <link>https://blog.qife122.com/tags/pdfsam/</link>
    <description>Recent content in PDFsam on 办公AI智能小助手</description>
    <generator>Hugo</generator>
    <language>zh-cn</language>
    <copyright>qife</copyright>
    <lastBuildDate>Mon, 29 Dec 2025 00:44:26 +0800</lastBuildDate>
    <atom:link href="https://blog.qife122.com/tags/pdfsam/index.xml" rel="self" type="application/rss+xml" />
    <item>
      <title>PDFsam Enhanced本地提权漏洞解析：CVE-2025-14405 与不安全的OpenSSL配置加载</title>
      <link>https://blog.qife122.com/p/pdfsam-enhanced%E6%9C%AC%E5%9C%B0%E6%8F%90%E6%9D%83%E6%BC%8F%E6%B4%9E%E8%A7%A3%E6%9E%90cve-2025-14405-%E4%B8%8E%E4%B8%8D%E5%AE%89%E5%85%A8%E7%9A%84openssl%E9%85%8D%E7%BD%AE%E5%8A%A0%E8%BD%BD/</link>
      <pubDate>Mon, 29 Dec 2025 00:44:26 +0800</pubDate>
      <guid>https://blog.qife122.com/p/pdfsam-enhanced%E6%9C%AC%E5%9C%B0%E6%8F%90%E6%9D%83%E6%BC%8F%E6%B4%9E%E8%A7%A3%E6%9E%90cve-2025-14405-%E4%B8%8E%E4%B8%8D%E5%AE%89%E5%85%A8%E7%9A%84openssl%E9%85%8D%E7%BD%AE%E5%8A%A0%E8%BD%BD/</guid>
      <description>&lt;h1 id=&#34;cve-2025-14405-cwe-427-pdfsam-enhanced中的不受控搜索路径元素&#34;&gt;CVE-2025-14405: CWE-427: PDFsam Enhanced中的不受控搜索路径元素&lt;/h1&gt;&#xA;&lt;p&gt;&lt;strong&gt;严重性&lt;/strong&gt;: 中&#xA;&lt;strong&gt;类型&lt;/strong&gt;: 漏洞&#xA;&lt;strong&gt;CVE&lt;/strong&gt;: CVE-2025-14405&lt;/p&gt;&#xA;&lt;p&gt;PDFsam Enhanced 不受控搜索路径元素本地权限提升漏洞。此漏洞允许物理在场的攻击者提升受影响PDFsam Enhanced安装的权限。攻击者必须首先获得将恶意驱动器挂载到目标系统的能力才能利用此漏洞。&lt;/p&gt;</description>
    </item>
  </channel>
</rss>
