CVE-2026-115758

SumatraPDF is a multi-format reader for Windows. In version 3.6.1 and earlier, HttpGet in src/base/Httpwin.cpp unconditionally passes INTERNETFLAGIGNORECERTCNINVALID to WinINet, disabling hostname matching for HTTPS update metadata and crash-symbol requests while retaining certificate-chain...