CVE-2026-107737

The multi-format reader SumatraPDF for Windows is vulnerable to an out-of-bounds object lookup in versions 3.6.1 and earlier , and in pre-release 3.7.0.20369 when WebView2 is absent or fails to initialize. The root cause lies in the ParseProtoUrl() function, which accepts the signed host componen...