Ssumatrapdfreader

Products

Exploited and recent CVEs

• CVE-2026-115758 High 8.2 SumatraPDF: TLS hostname validation disabled in `HttpGet()` 0.1%
• CVE-2026-107802 High 7.1 SumatraPDF — Windows command-line argument injection in AI selection-translate 0.2%
• CVE-2026-107738 Medium 6.8 SumatraPDF: Untrusted binary record offset used without lower-bound validation 0.1%
• CVE-2026-107737 Medium 5.7 SumatraPDF CHM `its://` signed index causes an out-of-bounds object lookup 0.2%
• CVE-2026-107736 Medium 6.8 SumatraPDF: stack buffer overflow while processing EXIF Orientation metadata 0.1%
• CVE-2026-107735 Medium 5.4 SumatraPDF: `sumatrapdfrestrict.ini` never revokes any permission (fail-open policy initialization) 0.2%
• CVE-2026-107734 High 7.1 SumatraPDF: SyncTeX Argument Injection in Inverse Search Enables Arbitrary Command Execution via External Editors 0.2%
• CVE-2026-107733 Medium 6.8 SumatraPDF: Null-pointer dereference in `CmdExec` when no document tab is open 0.2%
• CVE-2026-107732 High 8.4 SumatraPDF: Markup/command-link injection into UI notification text 0.1%
• CVE-2026-107731 Medium 5.5 SumatraPDF: LIT parser range-validation flaws cause invalid-pointer reads and denial of service 0.1%
• CVE-2026-107730 Medium 5.5 SumatraPDF: Signed integer overflow in the LIT header parsing causes invalid-pointer read 0.1%
• CVE-2026-107729 Medium 5.5 SumatraPDF: Unsigned-to-signed hdrLen validation bypass in SumatraPDF MOBI parsing causes out-of-bounds read 0.1%
• CVE-2026-26054 Medium 6.8 SumatraPDF: Heap out-of-bounds read in MOBI header parser. 0.2%
• CVE-2026-55586 Medium 6.6 SumatraPDF: Heap out-of-bounds write in vendored CHMLib LZX Huffman table construction reachable from crafted CHM files 0.2%
• CVE-2026-25961 High 7.5 SumatraPDF Update MITM -> Arbitrary Code Execution 0.4%
• CVE-2026-25920 Medium 5.5 SumatraPDF has a heap out-of-bounds read in MOBI HuffDic decompressor 0.3%
• CVE-2026-25880 High 7.8 Untrusted Search Path in SumatraPDF Reader (explorer.exe on Windows) 0.2%
• CVE-2026-23951 Medium 5.5 SumatraPDF's Integer Underflow in PalmDbReader Leads to Crash 0.2%
• CVE-2026-23512 High 8.6 SumatraPDF has an Untrusted Search Path in sumatrapdf/src/AppTools.cpp 0.2%