📄 SumatraPDF 3.5.2 Remote Code Execution

SumatraPDF versions 3.5.0 to 3.5.2 disable TLS hostname verification during update checks using INTERNETFLAGIGNORECERTCNINVALID and do not perform any signature or integrity validation on the downloaded installer. Exploit Title: SumatraPDF 3.5.2 - Remote Code Execution Date: 2026-02-10 Exploit...

SumatraPDF 3.5.2 - Remote Code Execution

Exploit Title: SumatraPDF 3.5.2 - Remote Code Execution Date: 2026-02-10 Exploit Author: Mohammed I. Banyamer Vendor Homepage: https://www.sumatrapdfreader.org/ Software Link: https://www.sumatrapdfreader.org/download-free-pdf-viewer Version: 3.5.0 - 3.5.2 Tested on: Windows 10 / 11 CVE :...

VulnCheck KEV: CVE-2025-15556

Notepad++ when using the WinGUp updater, contains a download of code without integrity check vulnerability that could allow an attacker to intercept or redirect update traffic to download and execute an attacker-controlled installer. This could lead to arbitrary code execution with the privileges...