S
Vendor security profile
sumatrapdfreader
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs13
Critical0
CISA KEV0
Public exploit4
Patch rate%0
Avg. CVSS6.5
12-month vulnerability rate
0
0
0
0
0
0
0
0
0
1
1
11
CVE KEV
CVE severity distribution
13toplam CVE
High3 (23%)
Medium10 (77%)
Patch and exploitation view
%0
Verified patch
%0
CISA KEV
%31
Public exploit
0Patch available
0Partial
0Workaround
0Vendor: no patch
13Unknown
Latest vulnerabilities
7.1
CVE-2026-107802
SumatraPDF — Windows command-line argument injection in AI selection-translate
S
Patch status unknownEPSS %0
6.8
CVE-2026-107738
SumatraPDF: Untrusted binary record offset used without lower-bound validation
S
Patch status unknownEPSS %0
5.7
CVE-2026-107737
SumatraPDF CHM `its://` signed index causes an out-of-bounds object lookup
S
Patch status unknownEPSS %0
6.8
CVE-2026-107736
SumatraPDF: stack buffer overflow while processing EXIF Orientation metadata
S
Patch status unknownEPSS %0
5.4
CVE-2026-107735
SumatraPDF: `sumatrapdfrestrict.ini` never revokes any permission (fail-open policy initialization)
S
Patch status unknownEPSS %0
7.1
CVE-2026-107734
SumatraPDF: SyncTeX Argument Injection in Inverse Search Enables Arbitrary Command Execution via External Editors
S
Patch status unknownEPSS %0
6.8
CVE-2026-107733
SumatraPDF: Null-pointer dereference in `CmdExec` when no document tab is open
S
Patch status unknownEPSS %0
8.4
CVE-2026-107732
SumatraPDF: Markup/command-link injection into UI notification text
S
Patch status unknownEPSS %0
5.5
CVE-2026-107731
SumatraPDF: LIT parser range-validation flaws cause invalid-pointer reads and denial of service
S
Patch status unknownEPSS %0
5.5
CVE-2026-107730
SumatraPDF: Signed integer overflow in the LIT header parsing causes invalid-pointer read
S
Patch status unknownEPSS %0