Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
SumatraPDF is a multi-format reader for Windows. In 3.5.2 and earlier, the PDF reader allows execution of a malicious binary (explorer.exe) located in the same directory as the opened PDF when the user clicks File → “Show in folder”. This behavior leads to arbitrary code execution on the victim’s system with the privileges of the current user, without any warning or user interaction beyond the menu click.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
| Date | Total | Labels |
|---|
| 2026-02-09 | 1 | Disclosure1 |
| 2026-02-10 | 2 | Disclosure1Patch1 |
CVE-2026-25880 SumatraPDF is a multi-format reader for Windows. In 3.5.2 and earlier, the PDF reader allows execution of a malicious binary (explorer.exe) located in the same direct… https://www.cve.org/CVERecord?id=CVE-2026-25880
Post summary
The post announces CVE‑2026‑25880, noting that SumatraPDF versions 3.5.2 and earlier can execute a malicious binary placed in the same directory as a PDF.
An untrusted search path vulnerability (CVE-2026-25880) in SumatraPDF Reader on Windows could lead to code execution. Monitor for official patches to address this #WindowsSecurity #InfoSec flaw. https://www.pulsepatch.io/posts/cve-2026-25880-sumatrapdf-untrusted-search-path
Post summary
CVE‑2026‑25880 is an untrusted search path flaw in SumatraPDF that could enable code execution; no PoC or active exploitation is reported, but patches are anticipated.
CVE-2026-25880 SumatraPDF 3.5.2 Local Code Execution via Malicious File Path Int... https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-25880 Customizable Vulnerability Alerts: https://alerts.vulmon.com/?utm_source=twitter&utm_medium=social&utm_campaign=2102281&utm_content=4
Post summary
The post references CVE‑2026‑25880, highlighting a local code execution issue in SumatraPDF 3.5.2, and provides a link to detailed vulnerability information.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | sumatrapdfreader | sumatrapdf | - | - | - |