Skip to content
OpenAdvisories

Vendor

sumatrapdfreader

19 known vulnerabilities.

Products

sumatrapdf 19
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.5
    CVE-2026-25961 Public exploit

    SumatraPDF Update MITM -> Arbitrary Code Execution

    SumatraPDF is a multi-format reader for Windows. In 3.5.0 through 3.5.2, SumatraPDF's update mechanism disables TLS hostname verification (INTERNET_FLAG_IGNORE_CERT_CN_INVALID) and executes installers without signature checks. A network attacker with any vali…

    sumatrapdfreader sumatrapdf