<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>agentprime: sumatrapdf</title><description>Every new CVE for sumatrapdf.</description><link>https://agentprime.io/</link><item><title>CVE-2026-115758: SumatraPDF: TLS hostname validation disabled in `HttpGet()`</title><link>https://agentprime.io/advisories/CVE-2026-115758/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-115758/</guid><description>CVSS 8.2 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 04 Nov 2026 20:44:55 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-107802: SumatraPDF — Windows command-line argument injection in AI selection-translate</title><link>https://agentprime.io/advisories/CVE-2026-107802/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-107802/</guid><description>CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 08 Oct 2026 22:36:36 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-107738: SumatraPDF: Untrusted binary record offset used without lower-bound validation</title><link>https://agentprime.io/advisories/CVE-2026-107738/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-107738/</guid><description>CVSS 6.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 08 Oct 2026 22:35:30 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-107737: SumatraPDF CHM `its://` signed index causes an out-of-bounds object lookup</title><link>https://agentprime.io/advisories/CVE-2026-107737/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-107737/</guid><description>CVSS 5.7 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 08 Oct 2026 22:34:16 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-107736: SumatraPDF: stack buffer overflow while processing EXIF Orientation metadata</title><link>https://agentprime.io/advisories/CVE-2026-107736/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-107736/</guid><description>CVSS 6.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 08 Oct 2026 22:33:16 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-107735: SumatraPDF: `sumatrapdfrestrict.ini` never revokes any permission (fail-open policy initialization)</title><link>https://agentprime.io/advisories/CVE-2026-107735/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-107735/</guid><description>CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 08 Oct 2026 22:26:00 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-107734: SumatraPDF: SyncTeX Argument Injection in Inverse Search Enables Arbitrary Command Execution via External Editors</title><link>https://agentprime.io/advisories/CVE-2026-107734/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-107734/</guid><description>CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 08 Oct 2026 22:24:23 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-107733: SumatraPDF: Null-pointer dereference in `CmdExec` when no document tab is open</title><link>https://agentprime.io/advisories/CVE-2026-107733/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-107733/</guid><description>CVSS 6.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 08 Oct 2026 22:23:26 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-107732: SumatraPDF: Markup/command-link injection into UI notification text</title><link>https://agentprime.io/advisories/CVE-2026-107732/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-107732/</guid><description>CVSS 8.4 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 08 Oct 2026 22:22:11 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-107731: SumatraPDF: LIT parser range-validation flaws cause invalid-pointer reads and denial of service</title><link>https://agentprime.io/advisories/CVE-2026-107731/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-107731/</guid><description>CVSS 5.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 08 Oct 2026 22:20:36 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-107730: SumatraPDF: Signed integer overflow in the LIT header parsing causes invalid-pointer read</title><link>https://agentprime.io/advisories/CVE-2026-107730/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-107730/</guid><description>CVSS 5.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 08 Oct 2026 22:19:46 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-107729: SumatraPDF: Unsigned-to-signed hdrLen validation bypass in SumatraPDF MOBI parsing causes out-of-bounds read</title><link>https://agentprime.io/advisories/CVE-2026-107729/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-107729/</guid><description>CVSS 5.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 08 Oct 2026 22:18:40 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-26054: SumatraPDF: Heap out-of-bounds read in MOBI header parser.</title><link>https://agentprime.io/advisories/CVE-2026-26054/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-26054/</guid><description>CVSS 6.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 24 Sep 2026 16:48:03 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-55586: SumatraPDF: Heap out-of-bounds write in vendored CHMLib LZX Huffman table construction reachable from crafted CHM files</title><link>https://agentprime.io/advisories/CVE-2026-55586/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-55586/</guid><description>CVSS 6.6 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 20 Aug 2026 16:35:07 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-25961: SumatraPDF Update MITM -&gt; Arbitrary Code Execution</title><link>https://agentprime.io/advisories/CVE-2026-25961/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-25961/</guid><description>CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 09 Feb 2026 21:34:05 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-25920: SumatraPDF has a heap out-of-bounds read in MOBI HuffDic decompressor</title><link>https://agentprime.io/advisories/CVE-2026-25920/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-25920/</guid><description>CVSS 5.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 09 Feb 2026 21:32:26 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-25880: Untrusted Search Path in SumatraPDF Reader (explorer.exe on Windows)</title><link>https://agentprime.io/advisories/CVE-2026-25880/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-25880/</guid><description>CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 09 Feb 2026 21:10:59 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-23951: SumatraPDF&apos;s Integer Underflow in PalmDbReader Leads to Crash</title><link>https://agentprime.io/advisories/CVE-2026-23951/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-23951/</guid><description>CVSS 5.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 22 Jan 2026 00:17:10 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-23512: SumatraPDF has an Untrusted Search Path in sumatrapdf/src/AppTools.cpp</title><link>https://agentprime.io/advisories/CVE-2026-23512/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-23512/</guid><description>CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 14 Jan 2026 20:31:08 GMT</pubDate><category>CVE</category></item></channel></rss>