sumatrapdfreader
Security Risk Profile
44
/100
mediumSecurity Risk Score
Comprehensive risk assessment based on 13 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from May 11, 2009 to present
13
Total CVEs
10
Critical+High
1
Exploited
7
Unpatched
Threat Assessment
Avg CVSS
7.8
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
7
Critical/High
Risk Level
44/100
medium
⚠️ 1 Active Exploits
Severity Distribution
Critical
5High
5Medium
3Low
0Exploit Likelihood
>50% chance
020-50%
05-20%
0<5%
5Age Distribution
Common Weaknesses (CWE)
1
Buffer Overflow
5
2
Integer Underflow
1
3
Null Pointer Dereference
1
4
Integer Overflow
1
5
Use After Free
1
Most Affected Products
1. Sumatrapdfreader Sumatrapdf93
2. SumatraPDF SumatraPDF5
3. Kornel Lesiński SumatraPDF1
4. Artifex Mupdf1
5. Artifex Mupdf Iphone Os1
Recent Vulnerabilities
See more →CVE-2026-25961
CVSS 7.5EPSS 0%high
SumatraPDF Update MITM -> Arbitrary Code Execution
2/9/2026⚠ Exploited🔧 No Patch
CVE-2026-25920
CVSS 5.5EPSS 0%medium
SumatraPDF has a heap out-of-bounds read in MOBI HuffDic decompressor
2/9/2026🔧 No Patch
CVE-2026-25880
CVSS 7.8EPSS 0%high
Untrusted Search Path in SumatraPDF Reader (explorer.exe on Windows)
2/9/2026🔧 No Patch
CVE-2026-23951
CVSS 5.5EPSS 0%medium
SumatraPDF's Integer Underflow in PalmDbReader Leads to Crash
1/22/2026🔧 No Patch
CVE-2026-23512
CVSS 8.6EPSS 0%high
SumatraPDF has an Untrusted Search Path in sumatrapdf/src/AppTools.cpp
1/14/2026
CVE-2025-57248
CVSS 7.3high
9/15/2025
CVE-2023-33802
CVSS 5.5medium
7/26/2023🔧 No Patch
CVE-2012-5340
CVSS 7.8high
1/23/2020🔧 No Patch
CVE-2013-2830
CVSS 9.3critical
2/8/2018
CVE-2012-4896
CVSS 9.3critical
10/5/2012🔧 No Patch
Monitor sumatrapdfreader in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.