[ Vendor · 12 CVEs ]
sumatrapdfreader
CVEs affecting sumatrapdfreader published in the last 30 days, plus any sumatrapdfreader CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-107802 | 8 Oct 2026 | CVSS 7.1 | sumatrapdfreader sumatrapdfSumatraPDF is a multi-format reader for Windows. In 3.6.1 and earlier, src/SelectionTranslate.cpp embeds selected or pasted translation text in… | |
| CVE-2026-107733 | 8 Oct 2026 | CVSS 6.8 | sumatrapdfreader sumatrapdfSumatraPDF is a multi-format reader for Windows. In 3.6.1 and earlier, FrameOnCommand() handles CmdExec by passing a null current-tab pointer to… | |
| CVE-2026-107734 | 8 Oct 2026 | CVSS 7.1 | sumatrapdfreader sumatrapdfSumatraPDF is a multi-format reader for Windows. In 3.5.2 and earlier, an attacker-controlled SyncTeX source filename is substituted for the %f… | |
| CVE-2026-107735 | 8 Oct 2026 | CVSS 5.4 | sumatrapdfreader sumatrapdfSumatraPDF is a multi-format reader for Windows. In 3.6.1 and earlier, InitializePolicies() starts the sumatrapdfrestrict.ini path with… | |
| CVE-2026-107736 | 8 Oct 2026 | CVSS 6.8 | sumatrapdfreader sumatrapdfSumatraPDF is a multi-format reader for Windows. In 3.6.1 and earlier, MaybeFlipBitmap() asks GDI+ to read the attacker-controlled… | |
| CVE-2026-107737 | 8 Oct 2026 | CVSS 5.7 | sumatrapdfreader sumatrapdfSumatraPDF is a multi-format reader for Windows. In 3.6.1 and earlier, and in pre-release 3.7.0.20369 when WebView2 is absent or cannot initialize… | |
| CVE-2026-107738 | 8 Oct 2026 | CVSS 6.8 | sumatrapdfreader sumatrapdfSumatraPDF is a multi-format reader for Windows. In 3.6.1 and earlier, ChmFile::GetCharZ() narrows file-controlled unsigned string offsets from… | |
| CVE-2026-107729 | 8 Oct 2026 | CVSS 5.5 | sumatrapdfreader sumatrapdfSumatraPDF is a multi-format reader for Windows. In 3.7.0.22298, src/MobiDoc.cpp narrows the untrusted unsigned mobiHdr.hdrLen field to a signed… | |
| CVE-2026-107730 | 8 Oct 2026 | CVSS 5.5 | sumatrapdfreader sumatrapdfSumatraPDF is a multi-format reader for Windows. In 3.7.0.22298, LitParseHeader() in src/LitDoc.cpp computes the attacker-controlled hdrLen + nPieces… | |
| CVE-2026-107731 | 8 Oct 2026 | CVSS 5.5 | sumatrapdfreader sumatrapdfSumatraPDF is a multi-format reader for Windows. In 3.7.0.22298, four independently reachable range-validation variants in src/LitDoc.cpp allow… | |
| CVE-2026-107732 | 8 Oct 2026 | CVSS 8.4 | sumatrapdfreader sumatrapdfSumatraPDF is a multi-format reader for Windows. In 3.6.1 and earlier, untrusted document paths and PDF link targets are interpolated into… | |
| CVE-2026-26054 | 24 Sep 2026 | CVSS 6.8 | sumatrapdfreader sumatrapdfSumatraPDF is a multi-format reader for Windows. Prior to 3.6, the MobiDoc::ParseHeader function in src/MobiDoc.cpp validates a record using… |