{"items":[{"id":"CVE-2026-115758","published":"2026-11-04T20:44:55.316Z","updated":"2026-11-04T20:44:55.316Z","title":"SumatraPDF: TLS hostname validation disabled in `HttpGet()`","severity":"HIGH","score":8.2,"vendor":"sumatrapdfreader","product":"sumatrapdf","kev":false,"epss":0.00145,"kevAdded":null,"exploit":false},{"id":"CVE-2026-107802","published":"2026-10-08T22:36:36.409Z","updated":"2026-10-09T19:09:00.523Z","title":"SumatraPDF — Windows command-line argument injection in AI selection-translate","severity":"HIGH","score":7.1,"vendor":"sumatrapdfreader","product":"sumatrapdf","kev":false,"epss":0.00196,"kevAdded":null,"exploit":true},{"id":"CVE-2026-107738","published":"2026-10-08T22:35:30.475Z","updated":"2026-10-14T01:36:13.121Z","title":"SumatraPDF: Untrusted binary record offset used without lower-bound validation","severity":"MEDIUM","score":6.8,"vendor":"sumatrapdfreader","product":"sumatrapdf","kev":false,"epss":0.0012,"kevAdded":null,"exploit":false},{"id":"CVE-2026-107737","published":"2026-10-08T22:34:16.436Z","updated":"2026-10-13T16:28:11.204Z","title":"SumatraPDF CHM `its://` signed index causes an out-of-bounds object lookup","severity":"MEDIUM","score":5.7,"vendor":"sumatrapdfreader","product":"sumatrapdf","kev":false,"epss":0.00182,"kevAdded":null,"exploit":true},{"id":"CVE-2026-107736","published":"2026-10-08T22:33:16.166Z","updated":"2026-10-09T15:12:35.540Z","title":"SumatraPDF: stack buffer overflow while processing EXIF Orientation metadata","severity":"MEDIUM","score":6.8,"vendor":"sumatrapdfreader","product":"sumatrapdf","kev":false,"epss":0.0012,"kevAdded":null,"exploit":false},{"id":"CVE-2026-107735","published":"2026-10-08T22:26:00.405Z","updated":"2026-10-09T15:24:14.433Z","title":"SumatraPDF: `sumatrapdfrestrict.ini` never revokes any permission (fail-open policy initialization)","severity":"MEDIUM","score":5.4,"vendor":"sumatrapdfreader","product":"sumatrapdf","kev":false,"epss":0.00172,"kevAdded":null,"exploit":true},{"id":"CVE-2026-107734","published":"2026-10-08T22:24:23.861Z","updated":"2026-10-09T15:44:18.411Z","title":"SumatraPDF: SyncTeX Argument Injection in Inverse Search Enables Arbitrary Command Execution via External Editors","severity":"HIGH","score":7.1,"vendor":"sumatrapdfreader","product":"sumatrapdf","kev":false,"epss":0.002,"kevAdded":null,"exploit":true},{"id":"CVE-2026-107733","published":"2026-10-08T22:23:26.389Z","updated":"2026-10-14T01:33:16.443Z","title":"SumatraPDF: Null-pointer dereference in `CmdExec` when no document tab is open","severity":"MEDIUM","score":6.8,"vendor":"sumatrapdfreader","product":"sumatrapdf","kev":false,"epss":0.00156,"kevAdded":null,"exploit":true},{"id":"CVE-2026-107732","published":"2026-10-08T22:22:11.879Z","updated":"2026-10-13T16:28:47.961Z","title":"SumatraPDF: Markup/command-link injection into UI notification text","severity":"HIGH","score":8.4,"vendor":"sumatrapdfreader","product":"sumatrapdf","kev":false,"epss":0.00131,"kevAdded":null,"exploit":false},{"id":"CVE-2026-107731","published":"2026-10-08T22:20:36.456Z","updated":"2026-10-09T15:12:44.556Z","title":"SumatraPDF: LIT parser range-validation flaws cause invalid-pointer reads and denial of service","severity":"MEDIUM","score":5.5,"vendor":"sumatrapdfreader","product":"sumatrapdf","kev":false,"epss":0.00113,"kevAdded":null,"exploit":false},{"id":"CVE-2026-107730","published":"2026-10-08T22:19:46.900Z","updated":"2026-10-09T15:06:40.595Z","title":"SumatraPDF: Signed integer overflow in the LIT header parsing causes invalid-pointer read","severity":"MEDIUM","score":5.5,"vendor":"sumatrapdfreader","product":"sumatrapdf","kev":false,"epss":0.00122,"kevAdded":null,"exploit":false},{"id":"CVE-2026-107729","published":"2026-10-08T22:18:40.609Z","updated":"2026-10-09T15:46:45.488Z","title":"SumatraPDF: Unsigned-to-signed hdrLen validation bypass in SumatraPDF MOBI parsing causes out-of-bounds read","severity":"MEDIUM","score":5.5,"vendor":"sumatrapdfreader","product":"sumatrapdf","kev":false,"epss":0.00146,"kevAdded":null,"exploit":false},{"id":"CVE-2026-26054","published":"2026-09-24T16:48:03.247Z","updated":"2026-09-28T15:33:32.202Z","title":"SumatraPDF: Heap out-of-bounds read in MOBI header parser.","severity":"MEDIUM","score":6.8,"vendor":"sumatrapdfreader","product":"sumatrapdf","kev":false,"epss":0.00209,"kevAdded":null,"exploit":true},{"id":"CVE-2026-55586","published":"2026-08-20T16:35:07.359Z","updated":"2026-08-21T21:47:17.240Z","title":"SumatraPDF: Heap out-of-bounds write in vendored CHMLib LZX Huffman table construction reachable from crafted CHM files","severity":"MEDIUM","score":6.6,"vendor":"sumatrapdfreader","product":"sumatrapdf","kev":false,"epss":0.00174,"kevAdded":null,"exploit":false},{"id":"CVE-2026-25961","published":"2026-02-09T21:34:05.203Z","updated":"2026-02-10T15:57:28.303Z","title":"SumatraPDF Update MITM -> Arbitrary Code Execution","severity":"HIGH","score":7.5,"vendor":"sumatrapdfreader","product":"sumatrapdf","kev":false,"epss":0.00449,"kevAdded":null,"exploit":false},{"id":"CVE-2026-25920","published":"2026-02-09T21:32:26.520Z","updated":"2026-02-11T19:58:04.411Z","title":"SumatraPDF has a heap out-of-bounds read in MOBI HuffDic decompressor","severity":"MEDIUM","score":5.5,"vendor":"sumatrapdfreader","product":"sumatrapdf","kev":false,"epss":0.00265,"kevAdded":null,"exploit":false},{"id":"CVE-2026-25880","published":"2026-02-09T21:10:59.964Z","updated":"2026-02-10T15:58:14.407Z","title":"Untrusted Search Path in SumatraPDF Reader (explorer.exe on Windows)","severity":"HIGH","score":7.8,"vendor":"sumatrapdfreader","product":"sumatrapdf","kev":false,"epss":0.00229,"kevAdded":null,"exploit":false},{"id":"CVE-2026-23951","published":"2026-01-22T00:17:10.159Z","updated":"2026-01-22T21:44:27.284Z","title":"SumatraPDF's Integer Underflow in PalmDbReader Leads to Crash","severity":"MEDIUM","score":5.5,"vendor":"sumatrapdfreader","product":"sumatrapdf","kev":false,"epss":0.00221,"kevAdded":null,"exploit":true},{"id":"CVE-2026-23512","published":"2026-01-14T20:31:08.724Z","updated":"2026-01-14T21:04:47.478Z","title":"SumatraPDF has an Untrusted Search Path in sumatrapdf/src/AppTools.cpp","severity":"HIGH","score":8.6,"vendor":"sumatrapdfreader","product":"sumatrapdf","kev":false,"epss":0.00227,"kevAdded":null,"exploit":true}]}