CVE-2017-3115

CVE-2017-3115 is an information-disclosure vulnerability in Adobe Acrobat/Reader when handling links in a PDF. Affected: Adobe Acrobat Reader 2017.009.20058 and earlier; 2017.008.30051 and earlier; 2015.006.30306 and earlier; and 11.0.20 and earlier (per initial description). Connected OpenVAS en...

CVE-2017-11223

Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable use after free vulnerability in the core of the XFA engine. Successful exploitation could lead to arbitrary code execution...

CVE-2017-11262

Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable memory corruption vulnerability in the image conversion engine when processing Enhanced Metafile Format EMF data related to drawing ASCII text string...

CVE-2017-11223

Technical details for CVE-2017-11223 are not publicly available in the provided connected documents. Monitor for updates.

CVE-2017-11242

Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable memory corruption vulnerability in the image conversion engine when processing Enhanced Metafile Format EMF data related to line segments. Successful...

CVE-2017-11227

Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable memory corruption vulnerability in the image conversion engine when processing Enhanced Metafile Format EMF private data. Successful exploitation cou...

CVE-2017-11216

Technical details for CVE-2017-11216 are not publicly available in the provided documents. Monitor for updates; the sources reference multiple Acrobat vulnerabilities but do not specify this CVE’s affected product/version, root cause, or fix.

CVE-2017-11224

CVE-2017-11224 affects Adobe Acrobat/Reader (various 2017/earlier builds) with the XFA layout engine. It is described as a use-after-free in XFA, with successful exploitation potentially enabling arbitrary code execution (high severity). The connected OpenVAS entries reference this CVE as part of...

CVE-2017-11210

Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable memory corruption vulnerability in the font parsing, where the font is embedded in the XML Paper Specification XPS file. Successful exploitation coul...

CVE-2017-11228

Technical details about CVE-2017-11228 (affected software, root cause, impact, or fixes) are not publicly provided in the supplied documents. Monitor for updates and new disclosures.

CVE-2017-3118

Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has a security bypass vulnerability related to execution of malicious attachments...

CVE-2017-11214

Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable memory corruption vulnerability in the image conversion engine when processing Enhanced Metafile Format EMF data related to rendering a path...

CVE-2017-11217

CVE-2017-11217 affects Adobe Acrobat Reader and related products (Acrobat Reader DC/Classic/Continuous). The issue is a memory corruption vulnerability in the image conversion engine when processing EMF data that encodes Unicode text strings, which could lead to arbitrary code execution on succes...

CVE-2017-11224

Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable use after free vulnerability in the XFA layout engine. Successful exploitation could lead to arbitrary code execution...

CVE-2017-11243

Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier contains a memory corruption vulnerability in the XSLT engine. Successful exploitation could lead to arbitrary code execution. This CVE (CVE-2017-11243) affects multipl...

CVE-2017-11235

Technical details for CVE-2017-11235 are not provided in the supplied documents. No affected product/version or exploit information is specified here; monitor for updates in primary sources.

CVE-2017-11209

CVE-2017-11209 affects Adobe Acrobat Reader (Windows/macOS) versions including 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier. The issue is a memory corruption vulnerability that occurs when reading a JPEG embedded in an XML Paper Speci...

CVE-2017-11251

Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable memory corruption vulnerability in the JPEG 2000 parsing module. Successful exploitation could lead to arbitrary code execution...

CVE-2017-3116

Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable memory corruption vulnerability in the MakeAccessible plugin when parsing TrueType font data. Successful exploitation could lead to arbitrary code...

CVE-2017-11241

Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable heap overflow vulnerability in the image conversion engine when processing Enhanced Metafile Format EMF data related to polygons. Successful...