Sumatrapdf@3.5.2 Security Vulnerabilities and Issues — Sumatrapdf@3.5.2 CVE List

SumatrapdfreaderSumatrapdf3.5.2

5 matches found

CVE•added 2026/02/09 9:34 p.m.•31 views

CVE-2026-25961

CVE-2026-25961 affects SumatraPDF

7.5CVSS6AI score0.00445EPSS

CVE•added 2026/01/14 8:31 p.m.•29 views

CVE-2026-23512

SumatraPDF has a Untrusted Search Path vulnerability in version 3.5.2 and earlier when the Advanced Options setting is triggered. The code path executes notepad.exe without an absolute path, allowing a malicious notepad.exe placed in the installation directory to run arbitrary code with local acc...

8.6CVSS7.4AI score0.00191EPSS

CVE•added 2026/02/09 9:32 p.m.•22 views

CVE-2026-25920

CVE-2026-25920 affects SumatraPDF

5.5CVSS5.5AI score0.00217EPSS

CVE•added 2026/02/09 9:10 p.m.•21 views

CVE-2026-25880

SumatraPDF (Windows)

7.8CVSS6.3AI score0.00192EPSS

CVE•added 2025/09/15 12:0 a.m.•19 views

CVE-2025-57248

SumatraPDF 3.5.2 is affected by a null pointer dereference in libmupdf.dll during processing of crafted .djvu files, triggering a crash via DataPool::has_data(). The vulnerability is documented across multiple feeds (NVD/Red Hat NVD/CVE listings, OSV, Snyk, CNNVD, Red Hat, etc.), all identifying ...

7.3CVSS6.4AI score0.00227EPSS