Lucene search
+L

139 matches found

OSV
OSV
added 2026/01/22 12:17 a.m.10 views

CVE-2026-23951 SumatraPDF's Integer Underflow in PalmDbReader Leads to Crash

SumatraPDF is a multi-format reader for Windows. All versions contain an off-by-one error in the validation code that only triggers with exactly 2 records, causing an integer underflow in the size calculation. This bug exists in PalmDbReader::GetRecord when opening a crafted Mobi file, resulting ...

5.5CVSS5.5AI score
SaveExploits0References4
CNNVD
CNNVD
added 2026/01/22 12:00 a.m.15 views

sumatrapdf numerical error vulnerability

Sumatrapdf is an open-source PDF reader developed by SumatraPDF Reader. SumatraPDF has a digital error vulnerability; this vulnerability stems from handling specially crafted Mobi files, where a single mistake or integer underflow can lead to out-of-bounds heap access and application crashes...

5.5CVSS5.8AI score0.00201EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
added 2026/01/22 12:00 a.m.19 views

PT-2026-3887

SumatraPDF is a multi-format reader for Windows. All versions contain an off-by-one error in the validation code that only triggers with exactly 2 records, causing an integer underflow in the size calculation. This bug exists in PalmDbReader::GetRecord when opening a crafted Mobi file, resulting ...

5.5CVSS5.5AI score0.00201EPSS
SaveExploits1References3
BDU FSTEC
BDU FSTEC
added 2026/01/19 12:00 a.m.10 views

The vulnerability of the PDF, EPUB, MOBI, FB2, CHM, XPS, and DjVu viewing program SumatraPDF lies in the use of an insecure search path, allowing attackers to execute arbitrary code.

The vulnerability of the PDF, EPUB, MOBI, FB2, CHM, XPS, and DjVu viewing program SumatraPDF lies in the use of an unreliable search path during the processing of Advanced Options. Exploiting this vulnerability allows a attacker to execute arbitrary code by sending a specially created malicious...

8.6CVSS6.1AI score0.00194EPSS
SaveExploits1References3Affected Software1
RedhatCVE
RedhatCVE
added 2026/01/15 9:24 p.m.44 views

CVE-2026-23512

SumatraPDF is a multi-format reader for Windows. In 3.5.2 and earlier, there is a Untrusted Search Path vulnerability when Advanced Options setting is trigger. The application executes notepad.exe without specifying an absolute path when using the Advanced Options setting. On Windows, this allows...

8.6CVSS7.4AI score0.00194EPSS
SaveExploits1References1
NVD
NVD
added 2026/01/14 9:15 p.m.13 views

CVE-2026-23512

SumatraPDF is a multi-format reader for Windows. In 3.5.2 and earlier, there is a Untrusted Search Path vulnerability when Advanced Options setting is trigger. The application executes notepad.exe without specifying an absolute path when using the Advanced Options setting. On Windows, this allows...

8.6CVSS0.00194EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
added 2026/01/14 8:31 p.m.18 views

CVE-2026-23512 SumatraPDF has an Untrusted Search Path in sumatrapdf/src/AppTools.cpp

SumatraPDF is a multi-format reader for Windows. In 3.5.2 and earlier, there is a Untrusted Search Path vulnerability when Advanced Options setting is trigger. The application executes notepad.exe without specifying an absolute path when using the Advanced Options setting. On Windows, this allows...

8.6CVSS7.4AI score0.00194EPSS
SaveExploits1References2
Cvelist
Cvelist
added 2026/01/14 8:31 p.m.31 views

CVE-2026-23512 SumatraPDF has an Untrusted Search Path in sumatrapdf/src/AppTools.cpp

SumatraPDF is a multi-format reader for Windows. In 3.5.2 and earlier, there is a Untrusted Search Path vulnerability when Advanced Options setting is trigger. The application executes notepad.exe without specifying an absolute path when using the Advanced Options setting. On Windows, this allows...

8.6CVSS0.00194EPSS
SaveExploits1References2
CVE
CVE
added 2026/01/14 8:31 p.m.39 views

CVE-2026-23512

SumatraPDF has a Untrusted Search Path vulnerability in version 3.5.2 and earlier when the Advanced Options setting is triggered. The code path executes notepad.exe without an absolute path, allowing a malicious notepad.exe placed in the installation directory to run arbitrary code with local acc...

8.6CVSS7.4AI score0.00194EPSS
SaveExploits1References2Affected Software1
EUVD
EUVD
added 2026/01/14 8:31 p.m.11 views

EUVD-2026-2675

SumatraPDF is a multi-format reader for Windows. In 3.5.2 and earlier, there is a Untrusted Search Path vulnerability when Advanced Options setting is trigger. The application executes notepad.exe without specifying an absolute path when using the Advanced Options setting. On Windows, this allows...

8.6CVSS7.3AI score0.00194EPSS
SaveExploits1References2
ATTACKERKB
ATTACKERKB
added 2026/01/14 8:31 p.m.5 views

CVE-2026-23512

SumatraPDF is a multi-format reader for Windows. In 3.5.2 and earlier, there is a Untrusted Search Path vulnerability when Advanced Options setting is trigger. The application executes notepad.exe without specifying an absolute path when using the Advanced Options setting. On Windows, this allows...

8.6CVSS6.2AI score0.00194EPSS
SaveExploits1References3Affected Software1
OSV
OSV
added 2026/01/14 8:31 p.m.10 views

CVE-2026-23512 SumatraPDF has an Untrusted Search Path in sumatrapdf/src/AppTools.cpp

SumatraPDF is a multi-format reader for Windows. In 3.5.2 and earlier, there is a Untrusted Search Path vulnerability when Advanced Options setting is trigger. The application executes notepad.exe without specifying an absolute path when using the Advanced Options setting. On Windows, this allows...

8.6CVSS7.7AI score
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2026/01/14 12:00 a.m.16 views

PT-2026-2956

Name of the Vulnerable Software and Affected Versions SumatraPDF versions 3.5.2 and earlier Description SumatraPDF is a multi-format reader for Windows. A flaw exists due to an Untrusted Search Path when the Advanced Options setting is triggered. The application executes notepad.exe without...

8.6CVSS6.9AI score0.00194EPSS
SaveExploits1References10
CNNVD
CNNVD
added 2026/01/14 12:00 a.m.8 views

sumatrapdf 代码问题漏洞

sumatrapdf is sumatrapdfreader open source a PDF reader. sumatrapdf 3.5.2 and previous versions of the code problematic vulnerability , the vulnerability stems from the execution of notepad.exe does not specify the absolute path , which may lead to arbitrary code execution...

8.6CVSS6.2AI score0.00194EPSS
SaveExploits1References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.9 views

EUVD-2012-4821

Malware in sbrugna...

9.3CVSS6.2AI score0.05193EPSS
SaveExploits0References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.11 views

EUVD-2012-5262

Malware in sbrugna...

7.8CVSS7.5AI score0.05731EPSS
SaveExploits5References5
EUVD
EUVD
added 2025/10/07 12:30 a.m.9 views

EUVD-2013-2769

Malware in sbrugna...

9.3CVSS7.7AI score0.03629EPSS
SaveExploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.10 views

EUVD-2012-4820

Malware in sbrugna...

9.3CVSS6.2AI score0.05193EPSS
SaveExploits0References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.10 views

EUVD-2009-1600

Malware in sbrugna...

9.3CVSS6.4AI score0.03446EPSS
SaveExploits1References7
EUVD
EUVD
added 2025/10/03 8:07 p.m.9 views

EUVD-2025-29204

Malicious code in bioql PyPI...

7.3CVSS6.5AI score0.00244EPSS
SaveExploits1References2
Rows per page
Query Builder