Browse CVEs

HIGH 7.5 CVE-2026-25961 SumatraPDF is a multi-format reader for Windows. In 3.5.0 through 3.5.2, SumatraPDF's update mechanism disables TLS hostname verification (INTERNET_F… Sumatrapdf after 3.5.2 Fix from $1,9502026-02-09 MEDIUM 5.5 CVE-2026-25920 SumatraPDF is a multi-format reader for Windows. In 3.5.2 and earlier, a heap out-of-bounds read vulnerability exists in SumatraPDF's MOBI HuffDic de… Sumatrapdf after 3.5.2 Fix from $1,6002026-02-09 HIGH 7.8 CVE-2026-25880 SumatraPDF is a multi-format reader for Windows. In 3.5.2 and earlier, the PDF reader allows execution of a malicious binary (explorer.exe) located i… Sumatrapdf after 3.5.2 Fix from $1,9502026-02-09 MEDIUM 5.5 CVE-2026-23951 SumatraPDF is a multi-format reader for Windows. All versions contain an off-by-one error in the validation code that only triggers with exactly 2 re… Sumatrapdf No fix yet Fix from $1,6002026-01-22 HIGH 7.8 CVE-2026-23512 SumatraPDF is a multi-format reader for Windows. In 3.5.2 and earlier, there is a Untrusted Search Path vulnerability when Advanced Options setting i… Sumatrapdf after 3.5.2 Fix from $1,9502026-01-14 HIGH 7.3 CVE-2025-57248 A null pointer dereference vulnerability was discovered in SumatraPDF 3.5.2 during the processing of a crafted .djvu file. When the file is opened, t… Sumatrapdf Patch available Fix from $1,9502025-09-15 MEDIUM 5.5 CVE-2023-33802 A buffer overflow in SumatraPDF Reader v3.4.6 allows attackers to cause a Denial of Service (DoS) via a crafted text file. Sumatrapdf No fix yet Fix from $1,6002023-07-26 HIGH 7.8 CVE-2012-5340EPSS 6% SumatraPDF 2.1.1/MuPDF 1.0 allows remote attackers to cause an Integer Overflow in the lex_number() function via a corrupt PDF file. Sumatrapdf No fix yet Fix from $1,9502020-01-23 HIGH 7.8 CVE-2013-2830 Use-after-free vulnerability in SumatraPDF Reader 2.x before 2.2.1 allows remote attackers to execute arbitrary code via a crafted PDF file. Sumatrapdf 2.2.1+ Fix from $1,9502018-02-08 HIGH 9.3 CVE-2012-4895EPSS 5% Heap-based buffer overflow in SumatraPDF before 2.1 allows remote attackers to execute arbitrary code via a crafted PDF document, a different vulnera… Sumatrapdf after 2.0.1 Fix from $1,9502012-10-05 HIGH 9.3 CVE-2012-4896EPSS 5% Heap-based buffer overflow in SumatraPDF before 2.1 allows remote attackers to execute arbitrary code via a crafted PDF document, a different vulnera… Sumatrapdf after 2.0.1 Fix from $1,9502012-10-05 HIGH 9.3 CVE-2009-4117EPSS 8% Multiple stack-based buffer overflows in pdf_shade4.c in MuPDF before commit 20091125231942, as used in SumatraPDF before 1.0.1, allow remote attacke… Sumatrapdf after 1.0 Fix from $1,9502009-12-01 MEDIUM 5.4 CVE-2009-1605 Heap-based buffer overflow in the loadexponentialfunc function in mupdf/pdf_function.c in MuPDF in the mupdf-20090223-win32 package, as used in Sumat… Sumatrapdf after 0.9.3 Fix from $1,6002009-05-11