CVE-2017-11209

CVE-2017-11209 affects Adobe Acrobat Reader (Windows/macOS) versions including 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier. The issue is a memory corruption vulnerability that occurs when reading a JPEG embedded in an XML Paper Speci...

CVE-2017-11222

Technical details for CVE-2017-11222 are not publicly available in the provided documents. Monitor for updates.

CVE-2017-11220

CVE-2017-11220 affects Adobe Acrobat/Reader components across Acrobat DC/Classic/Continuous tracks and Acrobat 2017, with a heap overflow in an internal data structure leading to possible arbitrary code execution. Affected products (per initial description): Adobe Acrobat Reader 2017.009.20058 an...

EUVD-2017-2844

Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable memory corruption vulnerability in the font parsing, where the font is embedded in the XML Paper Specification XPS file. Successful exploitation coul...

CVE-2017-11232

CVE-2017-11232 affects Adobe Acrobat Reader versions 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier. The vulnerability is a use-after-free in EMF data handling related to brush manipulation, which could lead to arbitrary code execution ...

CVE-2017-11231

CVE-2017-11231 concerns Adobe Acrobat/Reader. Exploitation targets the Acrobat/Reader rendering engine via a use-after-free in affected versions (Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier), with potential for a...

CVE-2017-11238

The connected material confirms CVE-2017-11238 is a Java deserialization vulnerability in Adobe ColdFusion’s Flex Integration service (DataServicesCFProxy) exposed via an RMI interface. The flaw allows arbitrary Java objects to be deserialized over the network, enabling remote code execution when...

CVE-2017-11228

Technical details about CVE-2017-11228 (affected software, root cause, impact, or fixes) are not publicly provided in the supplied documents. Monitor for updates and new disclosures.

CVE-2017-11268

Technical details about CVE-2017-11268 are not provided in the connected documents. The initial description contains vulnerability specifics, but no additional technical details are available here. Monitor for updates.

CVE-2017-3115

CVE-2017-3115 is an information-disclosure vulnerability in Adobe Acrobat/Reader when handling links in a PDF. Affected: Adobe Acrobat Reader 2017.009.20058 and earlier; 2017.008.30051 and earlier; 2015.006.30306 and earlier; and 11.0.20 and earlier (per initial description). Connected OpenVAS en...

CVE-2017-3121

Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable memory corruption vulnerability in the Enhanced Metafile Format EMF parser. Successful exploitation could lead to arbitrary code execution...

CVE-2017-11244

Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable memory corruption vulnerability in the image conversion engine when processing Enhanced Metafile Format EMF data related to transformation of blocks ...

CVE-2017-11223

Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable use after free vulnerability in the core of the XFA engine. Successful exploitation could lead to arbitrary code execution...

CVE-2017-11233

CVE-2017-11233 affects several Adobe Acrobat Reader versions (including 2017.009.20058, 2017.008.30051, 2015.006.30306, and 11.0.20 and earlier). The issue is a memory corruption vulnerability in the image conversion engine when processing EMF data related to block transfer of pixels. According t...

CVE-2017-3118

CVE-2017-3118 is listed among multiple vulnerabilities addressed by Adobe’s APSB17-24 security updates for Acrobat/Reader products (including Acrobat Reader 2017 and various DC/Classic/Continuous tracks). The OpenVAS entries indicate this CVE is part of a batch reported for Acrobat/Reader on Mac,...

CVE-2017-3122

Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable memory corruption vulnerability in the image conversion engine when processing Enhanced Metafile Format EMF data related to Bezier curves. Successful...

CVE-2017-11265

Technical details for CVE-2017-11265 are not provided in the supplied Connected documents. The sources reference Acrobat advisories and multiple vulnerabilities but do not reveal specific affected products/versions, impact, or remediation for this CVE.

CVE-2017-11235

Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable use after free vulnerability in the image conversion engine when decompressing JPEG data. Successful exploitation could lead to arbitrary code...

CVE-2017-11229

Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has a security bypass vulnerability when manipulating Forms Data Format FDF...

CVE-2017-11241

Technical details for CVE-2017-11241 are not provided in the connected documents. OpenVAS entries reference broader Acrobat updates and other CVEs but do not disclose specific root cause, affected versions, or fixes. Monitor for updates.