https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2026-23951.htmlhttps://patchthecve.com/cve/CVE-2026-23951.htmlWed, 17 Jun 2026 10:22:20 +0000MEDIUM 5.5: SumatraPDF is a multi-format reader for Windows. All versions contain an off-by-one error in the validation code that only triggers with exactly 2 records, causing an integer underflow in the size calculation. This bug exists in PalmDbReader::GetRecord when opening a crafted Mobi file, resulting in https://patchthecve.com/cve/CVE-2026-23512.htmlhttps://patchthecve.com/cve/CVE-2026-23512.htmlWed, 17 Jun 2026 10:21:42 +0000HIGH 8.6: SumatraPDF is a multi-format reader for Windows. In 3.5.2 and earlier, there is a Untrusted Search Path vulnerability when Advanced Options setting is trigger. The application executes notepad.exe without specifying an absolute path when using the Advanced Options setting. On Windows, this allows exhttps://patchthecve.com/cve/CVE-2025-57248.htmlhttps://patchthecve.com/cve/CVE-2025-57248.htmlWed, 17 Jun 2026 09:42:58 +0000HIGH 7.3: A null pointer dereference vulnerability was discovered in SumatraPDF 3.5.2 during the processing of a crafted .djvu file. When the file is opened, the application crashes inside libmupdf.dll, specifically in the DataPool::has_data() function.