https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 22:17:28 +0000 https://cve.radiocsirt.org/vuln/bdu:2026-01951 bdu:2026-01951 https://cve.radiocsirt.org/vuln/bdu:2026-01951 https://cve.radiocsirt.org/vuln/euvd-2026-267758 EUVD-2026-267758 https://cve.radiocsirt.org/vuln/euvd-2026-267758 https://cve.radiocsirt.org/vuln/fkie_cve-2026-25961 <p>SumatraPDF is a multi-format reader for Windows. In 3.5.0 through 3.5.2, SumatraPDF&#39;s update mechanism disables TLS hostname verification (INTERNET_FLAG_IGNORE_CERT_CN_INVALID) and executes installers without signature checks. A network attacker with any valid TLS certificate (e.g., Let&#39;s Encrypt) can intercept the update check request, inject a malicious installer URL, and achieve arbitrary code execution.</p> <p>SumatraPDF is a multi-format reader for Windows. In 3.5.0 through 3.5.2, SumatraPDF&#39;s update mechanism disables TLS hostname verification (INTERNET_FLAG_IGNORE_CERT_CN_INVALID) and executes installers without signature checks. A network attacker with any valid TLS certificate (e.g., Let&#39;s Encrypt) can intercept the update check request, inject a malicious installer URL, and achieve arbitrary code execution.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-25961