sumatrapdfreader sumatrapdf vulnerabilities

Newest CVEs

• CVE-2026-115758

  SumatraPDF: TLS hostname validation disabled in `HttpGet()`

  sumatrapdfreader · sumatrapdf

  High8.2
• CVE-2026-107802

  SumatraPDF — Windows command-line argument injection in AI selection-translate

  sumatrapdfreader · sumatrapdf

  High7.1
• CVE-2026-107738

  SumatraPDF: Untrusted binary record offset used without lower-bound validation

  sumatrapdfreader · sumatrapdf

  Medium6.8
• CVE-2026-107737

  SumatraPDF CHM `its://` signed index causes an out-of-bounds object lookup

  sumatrapdfreader · sumatrapdf

  Medium5.7
• CVE-2026-107736

  SumatraPDF: stack buffer overflow while processing EXIF Orientation metadata

  sumatrapdfreader · sumatrapdf

  Medium6.8
• CVE-2026-107735

  SumatraPDF: `sumatrapdfrestrict.ini` never revokes any permission (fail-open policy initialization)

  sumatrapdfreader · sumatrapdf

  Medium5.4
• CVE-2026-107734

  SumatraPDF: SyncTeX Argument Injection in Inverse Search Enables Arbitrary Command Execution via External Editors

  sumatrapdfreader · sumatrapdf

  High7.1
• CVE-2026-107733

  SumatraPDF: Null-pointer dereference in `CmdExec` when no document tab is open

  sumatrapdfreader · sumatrapdf

  Medium6.8
• CVE-2026-107732

  SumatraPDF: Markup/command-link injection into UI notification text

  sumatrapdfreader · sumatrapdf

  High8.4
• CVE-2026-107731

  SumatraPDF: LIT parser range-validation flaws cause invalid-pointer reads and denial of service

  sumatrapdfreader · sumatrapdf

  Medium5.5