dompdf Known Exploited Vulnerabilities

Evidence-backed KEV intelligence for dompdf products — CISA KEV status, confidence, sensor telemetry, and virtual-patch availability.

Total KEVs

1

In CISA KEV

0

Beyond CISA KEV

1

Sensor Observed

1

Virtual Patch Available

0

dompdf KEVs Added by Year

Loading...

1 dompdf KEV added all time (primary attestation date).

Attested CVEs

CVE Confidence CISA KEV Added
CVE-2014-2383

dompdf.php in dompdf before 0.6.1, when DOMPDF_ENABLE_PHP is enabled, allows context-dependent attackers to bypass chroot protections and read...

Confirmed Not in CISA 25 Jul 2026

Common Vulnerability Classes (CWE)

  • CWE-200 — Exposure of Sensitive Information to an Unauthorized Actor 1

Browse all known exploited vulnerabilities · What is a known exploited vulnerability? · Methodology