dompdf vendor intelligence

dompdf Known Exploited Vulnerabilities

Track evidence-backed exploitation affecting dompdf products, including the gap beyond CISA KEV, confidence assessments, sensor observations, and practical response context.

Browse dompdf KEVs Full KEV feed

1
Total KEVs: 0
In CISA KEV: 1
Beyond CISA KEV: 1
Sensor Observed

The catalog gap matters for dompdf exposure

One of the one exploited dompdf CVEs tracked here are not in CISA KEV. Teams relying on the official catalog alone would miss 100% of this vendor portfolio.

0%
Covered by CISA: 100%
Beyond CISA: 1
Product families

Attested dompdf CVEs

Search the exploited-vulnerability portfolio, then narrow it to official CISA coverage or the additional records KEV Intelligence tracks beyond the catalog.

How exploitation is verified

CVE / description	Product	Confidence	CISA KEV	Added
CVE-2014-2383 dompdf.php in dompdf before 0.6.1, when DOMPDF_ENABLE_PHP is enabled, allows context-dependent attackers to bypass chroot protections and read...	dompdf	Confirmed	Beyond CISA	25 Jul 2026

Showing 1 of 1 dompdf known exploited vulnerabilities.

Recurring weakness patterns

Exposure account for one mapped occurrence across this dompdf KEV portfolio.

Browse all KEVs →

CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

Email Alerts

Get High-Impact KEV Alerts by Email

KEV Intelligence tracks known exploited vulnerabilities beyond CISA KEV. Subscribe for occasional, curator-picked alerts when exploitation warrants attention. For every update, use the RSS feed or API.