Skip to content
OpenAdvisories

Product · sumatrapdfreader

sumatrapdf

19 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • High 8.2
    CVE-2026-115758

    SumatraPDF: TLS hostname validation disabled in `HttpGet()`

    SumatraPDF is a multi-format reader for Windows. In version 3.6.1 and earlier, HttpGet() in src/base/Http_win.cpp unconditionally passes INTERNET_FLAG_IGNORE_CERT_CN_INVALID to WinINet, disabling hostname matching for HTTPS update metadata and crash-symbol re…

    sumatrapdfreader sumatrapdf
  • High 7.1
    CVE-2026-107802

    SumatraPDF — Windows command-line argument injection in AI selection-translate

    SumatraPDF is a multi-format reader for Windows. In 3.6.1 and earlier, src/SelectionTranslate.cpp embeds selected or pasted translation text in quoted Windows command lines using incomplete quote-only escaping. The affected BuildGrokTranslateCmdLineTemp(), Bu…

    sumatrapdfreader sumatrapdf
  • High 7.1
    CVE-2026-107734

    SumatraPDF: SyncTeX Argument Injection in Inverse Search Enables Arbitrary Command Execution via External Editors

    SumatraPDF is a multi-format reader for Windows. In 3.5.2 and earlier, an attacker-controlled SyncTeX source filename is substituted for the %f placeholder in an external editor command line without safe Windows argument quoting, and the resulting command lin…

    sumatrapdfreader sumatrapdf
  • High 8.4
    CVE-2026-107732

    SumatraPDF: Markup/command-link injection into UI notification text

    SumatraPDF is a multi-format reader for Windows. In 3.6.1 and earlier, untrusted document paths and PDF link targets are interpolated into notification text that ParseTip() interprets as trusted tip markup. When a user clicks an injected link, ExecuteTipLink(…

    sumatrapdfreader sumatrapdf
  • High 7.5
    CVE-2026-25961 Public exploit

    SumatraPDF Update MITM -> Arbitrary Code Execution

    SumatraPDF is a multi-format reader for Windows. In 3.5.0 through 3.5.2, SumatraPDF's update mechanism disables TLS hostname verification (INTERNET_FLAG_IGNORE_CERT_CN_INVALID) and executes installers without signature checks. A network attacker with any vali…

    sumatrapdfreader sumatrapdf
  • High 7.8
    CVE-2026-25880

    Untrusted Search Path in SumatraPDF Reader (explorer.exe on Windows)

    SumatraPDF is a multi-format reader for Windows. In 3.5.2 and earlier, the PDF reader allows execution of a malicious binary (explorer.exe) located in the same directory as the opened PDF when the user clicks File → “Show in folder”. This behavior leads to ar…

    sumatrapdfreader sumatrapdf
  • High 8.6
    CVE-2026-23512

    SumatraPDF has an Untrusted Search Path in sumatrapdf/src/AppTools.cpp

    SumatraPDF is a multi-format reader for Windows. In 3.5.2 and earlier, there is a Untrusted Search Path vulnerability when Advanced Options setting is trigger. The application executes notepad.exe without specifying an absolute path when using the Advanced Op…

    sumatrapdfreader sumatrapdf