Vulnerabilities
Summary — last 7 days
New vulnerabilities5,279▲ 2,571 vs. last week
Critical / high2,962▲ 1,655 vs. last week
New active exploitation (KEV)6▼ 2 vs. last week
Unscored (no CVSS)242▲ 69 vs. last week
3 results, sorted by published date (most recent first)
| CVE | Status | Severity | EPSS | Active exploitation | Affected technologies | Published ▼ | Modified | Description |
|---|---|---|---|---|---|---|---|---|
| Deferred | Medium (6.8) | 0.12% | — | Sumatrasoft Sumatra PDFAI | 10/8/2026 | 10/14/2026 | SumatraPDF is a multi-format reader for Windows. In 3.6.1 and earlier, ChmFile::GetCharZ() narrows file-controlled unsigned string offsets from /#WINDOWS and /#IVB to signed integers without a lower-bound check. An offset that becomes negative can make the function read before the /#STRINGS buffer, causing… | |
| Deferred | Medium (6.8) | 0.14% | — | Sumatra PDFAI | 9/24/2026 | 9/28/2026 | SumatraPDF is a multi-format reader for Windows. Prior to 3.6, the MobiDoc::ParseHeader function in src/MobiDoc.cpp validates a record using kMobiHeaderMinLen but DecodeMobiDocHeader constructs a decoder sized for kMobiHeaderLen without receiving the actual remaining buffer length. A malformed MOBI file can use an… | |
| Awaiting Analysis | High (7.5) | 0.43% | — | Sumatra PDFAI | 9/24/2026 | 9/25/2026 | SumatraPDF 3.6.1 contains an integer overflow vulnerability in EngineMupdf::BuildPageLabelRec() when parsing PDF PageLabels /Nums entries. |