CVE-2026-107802Proof of concept (PoC) published · CISA
SumatraPDF — Windows command-line argument injection in AI selection-translate
CVSS score
7.1
EPSS probability
%0.1
Risk score
0.0
Published
7 d ago
Public Exploits · GitHub and Metasploit Intelligence
This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.
No verified public exploit code was found.
GitHub repositories, NVD exploit references and the Metasploit Framework were scanned. A record of active exploitation does not mean that public exploit code has been published.
Similar Vulnerabilities
6.6
CVE-2026-55586
SumatraPDF: Heap out-of-bounds write in vendored CHMLib LZX Huffman table construction reachable from crafted CHM files
S
Patch status unknownEPSS %0
8.4
CVE-2026-107732
SumatraPDF: Markup/command-link injection into UI notification text
S
Patch status unknownEPSS %0
7.1
CVE-2026-107734
SumatraPDF: SyncTeX Argument Injection in Inverse Search Enables Arbitrary Command Execution via External Editors
S
Patch status unknownEPSS %0
6.8
CVE-2026-26054
SumatraPDF: Heap out-of-bounds read in MOBI header parser.
S
Patch status unknownEPSS %0
6.8
CVE-2026-107738
SumatraPDF: Untrusted binary record offset used without lower-bound validation
S
Patch status unknownEPSS %0
6.8
CVE-2026-107736
SumatraPDF: stack buffer overflow while processing EXIF Orientation metadata
S
Patch status unknownEPSS %0
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2026-107802"