Lucene search
+L

256 matches found

Positive Technologies
Positive Technologies
•added 2026/01/22 12:00 a.m.•33 views

PT-2026-3887

Name of the Vulnerable Software and Affected Versions SumatraPDF affected versions not specified Description SumatraPDF, a multi-format reader for Windows, contains an off-by-one error in the validation code that triggers only with exactly two records. This error causes an integer underflow in th...

5.5CVSS6.2AI score0.00221EPSS
SaveExploits1References11
CNNVD
CNNVD
•added 2026/01/22 12:00 a.m.•29 views

sumatrapdf numerical error vulnerability

Sumatrapdf is an open-source PDF reader developed by SumatraPDF Reader. SumatraPDF has a digital error vulnerability; this vulnerability stems from handling specially crafted Mobi files, where a single mistake or integer underflow can lead to out-of-bounds heap access and application crashes...

5.5CVSS5.9AI score0.00221EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/01/22 12:00 a.m.•11 views

CVE-2026-23951: Out-of-bounds Read

SumatraPDF is a multi-format reader for Windows. All versions contain an off-by-one error in the validation code that only triggers with exactly 2 records, causing an integer underflow in the size calculation. This bug exists in PalmDbReader::GetRecord when opening a crafted Mobi file, resulting ...

5.5CVSS5.9AI score0.00221EPSS
SaveExploits1References1
BDU FSTEC
BDU FSTEC
•added 2026/01/19 12:00 a.m.•22 views

SumatraPDF Insecure Search Path Code Execution

The vulnerability of the PDF, EPUB, MOBI, FB2, CHM, XPS, and DjVu viewing program SumatraPDF lies in the use of an unreliable search path during the processing of Advanced Options. Exploiting this vulnerability allows a attacker to execute arbitrary code by sending a specially created malicious...

8.6CVSS7.4AI score0.00227EPSS
SaveExploits1References3Affected Software1
RedhatCVE
RedhatCVE
•added 2026/01/15 9:24 p.m.•55 views

CVE-2026-23512

SumatraPDF is a multi-format reader for Windows. In 3.5.2 and earlier, there is a Untrusted Search Path vulnerability when Advanced Options setting is trigger. The application executes notepad.exe without specifying an absolute path when using the Advanced Options setting. On Windows, this allows...

8.6CVSS8AI score0.00227EPSS
SaveExploits1References1
NVD
NVD
•added 2026/01/14 9:15 p.m.•22 views

CVE-2026-23512

SumatraPDF is a multi-format reader for Windows. In 3.5.2 and earlier, there is a Untrusted Search Path vulnerability when Advanced Options setting is trigger. The application executes notepad.exe without specifying an absolute path when using the Advanced Options setting. On Windows, this allows...

8.6CVSS0.00227EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2026/01/14 8:31 p.m.•42 views

CVE-2026-23512 SumatraPDF has an Untrusted Search Path in sumatrapdf/src/AppTools.cpp

SumatraPDF is a multi-format reader for Windows. In 3.5.2 and earlier, there is a Untrusted Search Path vulnerability when Advanced Options setting is trigger. The application executes notepad.exe without specifying an absolute path when using the Advanced Options setting. On Windows, this allows...

8.6CVSS0.00227EPSS
SaveExploits1References2
osv_cve
osv_cve
•added 2026/01/14 8:31 p.m.•21 views

CVE-2026-23512 SumatraPDF has an Untrusted Search Path in sumatrapdf/src/AppTools.cpp

SumatraPDF is a multi-format reader for Windows. In 3.5.2 and earlier, there is a Untrusted Search Path vulnerability when Advanced Options setting is trigger. The application executes notepad.exe without specifying an absolute path when using the Advanced Options setting. On Windows, this allows...

8.6CVSS7.7AI score
SaveExploits0References4
attackerkb
attackerkb
•added 2026/01/14 8:31 p.m.•10 views

CVE-2026-23512

SumatraPDF is a multi-format reader for Windows. In 3.5.2 and earlier, there is a Untrusted Search Path vulnerability when Advanced Options setting is trigger. The application executes notepad.exe without specifying an absolute path when using the Advanced Options setting. On Windows, this allows...

8.6CVSS8.3AI score0.00227EPSS
SaveExploits1References3Affected Software1
CVE
CVE
•added 2026/01/14 8:31 p.m.•55 views

CVE-2026-23512

SumatraPDF has a Untrusted Search Path vulnerability in version 3.5.2 and earlier when the Advanced Options setting is triggered. The code path executes notepad.exe without an absolute path, allowing a malicious notepad.exe placed in the installation directory to run arbitrary code with local acc...

8.6CVSS8.3AI score0.00227EPSS
SaveExploits1References2Affected Software1
Vulnrichment
Vulnrichment
•added 2026/01/14 8:31 p.m.•22 views

CVE-2026-23512 SumatraPDF has an Untrusted Search Path in sumatrapdf/src/AppTools.cpp

SumatraPDF is a multi-format reader for Windows. In 3.5.2 and earlier, there is a Untrusted Search Path vulnerability when Advanced Options setting is trigger. The application executes notepad.exe without specifying an absolute path when using the Advanced Options setting. On Windows, this allows...

8.6CVSS8.3AI score0.00227EPSS
SaveExploits1References2
EUVD
EUVD
•added 2026/01/14 8:31 p.m.•22 views

EUVD-2026-2675

SumatraPDF is a multi-format reader for Windows. In 3.5.2 and earlier, there is a Untrusted Search Path vulnerability when Advanced Options setting is trigger. The application executes notepad.exe without specifying an absolute path when using the Advanced Options setting. On Windows, this allows...

8.6CVSS8.3AI score0.00227EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2026/01/14 12:00 a.m.•27 views

PT-2026-2956

Name of the Vulnerable Software and Affected Versions SumatraPDF versions 3.5.2 and earlier Description SumatraPDF is a multi-format reader for Windows. A flaw exists due to an Untrusted Search Path when the Advanced Options setting is triggered. The application executes notepad.exe without...

8.6CVSS7.9AI score0.00227EPSS
SaveExploits1References10
CNNVD
CNNVD
•added 2026/01/14 12:00 a.m.•15 views

Sumatrapdf code issue vulnerabilities

sumatrapdf is sumatrapdfreader open source a PDF reader. sumatrapdf 3.5.2 and previous versions of the code problematic vulnerability , the vulnerability stems from the execution of notepad.exe does not specify the absolute path , which may lead to arbitrary code execution...

8.6CVSS8.2AI score0.00227EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/01/14 12:00 a.m.•8 views

CVE-2026-23512: Untrusted Search Path

SumatraPDF is a multi-format reader for Windows. In 3.5.2 and earlier, there is a Untrusted Search Path vulnerability when Advanced Options setting is trigger. The application executes notepad.exe without specifying an absolute path when using the Advanced Options setting. On Windows, this allows...

8.6CVSS8.3AI score0.00227EPSS
SaveExploits1References1
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•17 views

EUVD-2013-2769

Malware in sbrugna...

9.3CVSS7.3AI score0.03629EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•24 views

EUVD-2012-5262

Malware in sbrugna...

7.8CVSS7.3AI score0.05731EPSS
SaveExploits5References5
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•21 views

EUVD-2012-4821

Malware in sbrugna...

9.3CVSS5.8AI score0.05193EPSS
SaveExploits0References4
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•19 views

EUVD-2012-4820

Malware in sbrugna...

9.3CVSS5.8AI score0.05193EPSS
SaveExploits0References4
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•20 views

EUVD-2009-1600

Malware in sbrugna...

9.3CVSS5.8AI score0.03446EPSS
SaveExploits1References7
Rows per page
Query Builder