Design/Logic Flaw

Acrobat Reader versions 20.005.30539, 23.008.20470 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2024-20726

CVE-2024-20726 affects Adobe Acrobat Reader DC (Continuous and Classic) versions including 20.005.30539 and 23.008.20470 and earlier. The issue is an out-of-bounds write that could lead to arbitrary code execution in the user context; exploitation requires the user to open a malicious file. Publi...

CVE-2024-20726 [TianfuCup] JP2K Image Parsing Out-Of-Bounds Write

Acrobat Reader versions 20.005.30539, 23.008.20470 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2024-20726 [TianfuCup] JP2K Image Parsing Out-Of-Bounds Write

Acrobat Reader versions 20.005.30539, 23.008.20470 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2024-20730 TALOS-2023-1906 - Adobe Acrobat Reader Font CPAL integer overflow vulnerability

Acrobat Reader versions 20.005.30539, 23.008.20470 and earlier are affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a...

CVE-2024-20731

CVE-2024-20731 affects Adobe Acrobat Reader (DC/Continuous) versions 20.005.30539, 23.008.20470 and earlier. It is described as a Use-After-Free in PDAnnot destroy that can lead to arbitrary code execution in the context of the current user, requiring user interaction (victim opens a malicious fi...

CVE-2024-20731 TALOS-2023-1901 - Adobe Acrobat Reader FileAttachment PDAnnot destroy use-after-free vulnerability

Acrobat Reader versions 20.005.30539, 23.008.20470 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2024-20730 TALOS-2023-1906 - Adobe Acrobat Reader Font CPAL integer overflow vulnerability

Acrobat Reader versions 20.005.30539, 23.008.20470 and earlier are affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a...

CVE-2024-20731 TALOS-2023-1901 - Adobe Acrobat Reader FileAttachment PDAnnot destroy use-after-free vulnerability

Acrobat Reader versions 20.005.30539, 23.008.20470 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2024-20730

Public description states an Integer Overflow/Wraparound in Adobe Acrobat Reader (versions 20.005.30539, 23.008.20470 and earlier) could lead to arbitrary code execution with user interaction. No additional technical details are provided in the connected documents.

CVE-2024-20727

CVE-2024-20727 affects Adobe Acrobat Reader DC (Continuous and Classic) across Windows and macOS. It describes an out-of-bounds write vulnerability in parsing JPEG2000 that could lead to arbitrary code execution in the context of the current user. Exploitation requires user interaction (victim mu...

CVE-2024-20727 [TianfuCup] out-of-bounds access vulnerability when parsing jpeg2000

Acrobat Reader versions 20.005.30539, 23.008.20470 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2024-20747

CVE-2024-20747 affects Adobe Acrobat Reader/Reader DC: Font CharStrings INDEX out-of-bounds read vulnerability in affected versions (e.g., 20.005.30539, 23.008.20470 and earlier). Root cause is an out-of-bounds read in font parsing (CharStrings) that could disclose memory and bypass ASLR; exploit...

CVE-2024-20747 TALOS-2023-1908 - Adobe Acrobat Reader Font CharStrings INDEX out-of-bounds read vulnerability

Acrobat Reader versions 20.005.30539, 23.008.20470 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user...

CVE-2024-20733 [ZS-VR-23-360] Adobe Acrobat Reader Parsing OTF font Denial-of-Service Vulnerability

Acrobat Reader versions 20.005.30539, 23.008.20470 and earlier are affected by an Improper Input Validation vulnerability that could lead to an application denial-of-service. An attacker could leverage this vulnerability to cause the application to crash, resulting in a denial of service...

CVE-2024-20733 [ZS-VR-23-360] Adobe Acrobat Reader Parsing OTF font Denial-of-Service Vulnerability

Acrobat Reader versions 20.005.30539, 23.008.20470 and earlier are affected by an Improper Input Validation vulnerability that could lead to an application denial-of-service. An attacker could leverage this vulnerability to cause the application to crash, resulting in a denial of service...

CVE-2024-20733

CVE-2024-20733 affects Adobe Acrobat Reader/DC (and related Continuous/Classic releases) with an Improvident input validation in font parsing (OTF) that can cause a denial-of-service. The issue is triggered when a user opens a specially crafted file, leading to an application crash. The vulnerabi...

CVE-2024-20748 TALOS-2023-1909 - Adobe Acrobat Reader Font avar SegmentMaps out-of-bounds read vulnerability

Acrobat Reader versions 20.005.30539, 23.008.20470 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user...

CVE-2024-20734

CVE-2024-20734 affects Adobe Acrobat Reader DC/Continuous and related variants, with a Use-After-Free in AcroForm that can disclose memory content. Affected versions include 20.005.30539 and 23.008.20470 and earlier. Exploitation requires user interaction (opening a malicious file) and could bypa...

CVE-2024-20748 TALOS-2023-1909 - Adobe Acrobat Reader Font avar SegmentMaps out-of-bounds read vulnerability

Acrobat Reader versions 20.005.30539, 23.008.20470 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user...