sumatrapdf
Security Risk Profile
38
/100
lowSecurity Risk Score
Comprehensive risk assessment based on 6 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from July 4, 2025 to present
6
Total CVEs
3
Critical+High
0
Exploited
1
Unpatched
Threat Assessment
Avg CVSS
6.7
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
1
Critical/High
Risk Level
38/100
low
Severity Distribution
Critical
0High
3Medium
3Low
0Exploit Likelihood
>50% chance
020-50%
05-20%
0<5%
4Age Distribution
Common Weaknesses (CWE)
1
Integer Underflow
1
2
Null Pointer Dereference
1
3
Integer Overflow
1
4
Buffer Overflow
1
Most Affected Products
1. SumatraPDF SumatraPDF6
2. Sumatrapdfreader Sumatrapdf5
3. chmlib chmlib1
Recent Vulnerabilities
See more →CVE-2026-25920
CVSS 5.5EPSS 0%medium
SumatraPDF has a heap out-of-bounds read in MOBI HuffDic decompressor
2/9/2026🔧 No Patch
CVE-2026-25880
CVSS 7.8EPSS 0%high
Untrusted Search Path in SumatraPDF Reader (explorer.exe on Windows)
2/9/2026🔧 No Patch
CVE-2026-23951
CVSS 5.5EPSS 0%medium
SumatraPDF's Integer Underflow in PalmDbReader Leads to Crash
1/22/2026🔧 No Patch
CVE-2026-23512
CVSS 8.6EPSS 0%high
SumatraPDF has an Untrusted Search Path in sumatrapdf/src/AppTools.cpp
1/14/2026
CVE-2025-57248
CVSS 7.3high
9/15/2025
CVE-2025-48172
CVSS 5.6medium
7/4/2025🔧 No Patch
Monitor sumatrapdf in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.