What’s Vulnerable › Products
sumatrapdfreader sumatrapdf vulnerabilities
26 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 19 published in the last 12 months.
Check whether your sumatrapdfreader sumatrapdf version is affected
Latest sumatrapdfreader sumatrapdf vulnerabilities
- CVE-2026-107802 — SumatraPDF — Windows command-line argument injection in AI selection-translate (CVSS 7.1)
- CVE-2026-107738 — SumatraPDF: Untrusted binary record offset used without lower-bound validation (CVSS 6.8)
- CVE-2026-107737 — SumatraPDF CHM `its://` signed index causes an out-of-bounds object lookup (CVSS 5.7)
- CVE-2026-107736 — SumatraPDF: stack buffer overflow while processing EXIF Orientation metadata (CVSS 6.8)
- CVE-2026-107735 — SumatraPDF: `sumatrapdfrestrict.ini` never revokes any permission (fail-open policy initialization) (CVSS 5.4)
- CVE-2026-107734 — SumatraPDF: SyncTeX Argument Injection in Inverse Search Enables Arbitrary Command Execution via External Editors (CVSS 7.1)
- CVE-2026-107733 — SumatraPDF: Null-pointer dereference in `CmdExec` when no document tab is open (CVSS 6.8)
- CVE-2026-107732 — SumatraPDF: Markup/command-link injection into UI notification text (CVSS 8.4)
- CVE-2026-107731 — SumatraPDF: LIT parser range-validation flaws cause invalid-pointer reads and denial of service (CVSS 5.5)
- CVE-2026-107730 — SumatraPDF: Signed integer overflow in the LIT header parsing causes invalid-pointer read (CVSS 5.5)
- CVE-2026-107729 — SumatraPDF: Unsigned-to-signed hdrLen validation bypass in SumatraPDF MOBI parsing causes out-of-bounds read (CVSS 5.5)
- CVE-2026-26054 — SumatraPDF: Heap out-of-bounds read in MOBI header parser. (CVSS 6.8)
- CVE-2026-55586 — SumatraPDF: Heap out-of-bounds write in vendored CHMLib LZX Huffman table construction reachable from crafted CHM files (CVSS 6.6)
- CVE-2026-25961 — SumatraPDF Update MITM -> Arbitrary Code Execution (CVSS 7.5)
- CVE-2026-25920 — SumatraPDF has a heap out-of-bounds read in MOBI HuffDic decompressor (CVSS 5.5)
- CVE-2026-25880 — Untrusted Search Path in SumatraPDF Reader (explorer.exe on Windows) (CVSS 7.8)
- CVE-2026-23951 — SumatraPDF's Integer Underflow in PalmDbReader Leads to Crash (CVSS 5.5)
- CVE-2026-23512 — SumatraPDF has an Untrusted Search Path in sumatrapdf/src/AppTools.cpp (CVSS 7.8)
- CVE-2025-57248 — (CVSS 7.3)
- CVE-2023-33802 — (CVSS 5.5)
- CVE-2012-5340 — (CVSS 7.8)
- CVE-2013-2830 — (CVSS 7.8)
- CVE-2012-4896 — (CVSS 9.3)
- CVE-2012-4895 — (CVSS 9.3)
- CVE-2009-4117 — (CVSS 9.3)