CVE-2026-107737 | sumatrapdfreader SumatraPDF up to 3.6.1 IE fallback backend ParseProtoUrl/FindHtmlWindowById out-of-bounds

October 9, 2026 Yanac

A vulnerability was found in sumatrapdfreader SumatraPDF up to 3.6.1 and classified as critical. Affected is the function ParseProtoUrl/FindHtmlWindowById of the component IE fallback backend. Executing a manipulation can lead to out-of-bounds read.

This vulnerability appears as CVE-2026-107737. The attack may be performed from remote. There is no available exploit.VulDB Recent EntriesRead More