Design/Logic Flaw

The ANSendForApproval method in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2015.006.30094, and Acrobat and Acrobat Reader DC Continuous before 2015.009.20069 on Windows and OS X allows attackers to bypass JavaScript API...

Design/Logic Flaw

Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2015.006.30094, and Acrobat and Acrobat Reader DC Continuous before 2015.009.20069 on Windows and OS X allow attackers to bypass intended sandbox restrictions and obtain sensitive PD...

CVE-2015-6692

Buffer overflow in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2015.006.30094, and Acrobat and Acrobat Reader DC Continuous before 2015.009.20069 on Windows and OS X allows attackers to obtain sensitive information via...

CVE-2015-6698

Heap-based buffer overflow in the AcroForm implementation in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2015.006.30094, and Acrobat and Acrobat Reader DC Continuous before 2015.009.20069 on Windows and OS X allows attackers t...

CVE-2015-6690

Use-after-free vulnerability in the popUpMenuEx method in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2015.006.30094, and Acrobat and Acrobat Reader DC Continuous before 2015.009.20069 on Windows and OS X allows attackers to...

CVE-2015-6701

The ambientIlluminationColor property implementation in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2015.006.30094, and Acrobat and Acrobat Reader DC Continuous before 2015.009.20069 on Windows and OS X allows attackers to...

CVE-2015-6711

The DoIdentityDialog method in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2015.006.30094, and Acrobat and Acrobat Reader DC Continuous before 2015.009.20069 on Windows and OS X allows attackers to bypass JavaScript API...

CVE-2015-6721

Technical details about CVE-2015-6721 are not provided in the connected documents. Public information here is limited. Monitor EUVD entries for updates; no confirmed exploit vectors or affected products are disclosed in the supplied sources.

CVE-2015-6709

The CBBBRInvite method in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2015.006.30094, and Acrobat and Acrobat Reader DC Continuous before 2015.009.20069 on Windows and OS X allows attackers to bypass JavaScript API execution...

CVE-2015-6703

The loadFlashMovie function in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2015.006.30094, and Acrobat and Acrobat Reader DC Continuous before 2015.009.20069 on Windows and OS X allows attackers to obtain sensitive information...

CVE-2015-6712

The ANSendApprovalToAuthorEnabled method in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2015.006.30094, and Acrobat and Acrobat Reader DC Continuous before 2015.009.20069 on Windows and OS X allows attackers to bypass JavaScri...

CVE-2015-6689

CVE-2015-6689 is a use-after-free vulnerability in Adobe Reader and Acrobat affecting 10.x (pre-10.1.16) and 11.x (pre-11.0.13), and Adobe Acrobat/Reader DC Classic before 2015.006.30094 or DC Continuous before 2015.009.20069, on Windows and macOS. The flaw is triggered by a crafted WillSave docu...

CVE-2015-6717

Technical details for CVE-2015-6717 are not publicly available in the provided connected documents. Monitor for official updates from Adobe and vulnerability trackers.

CVE-2015-7619

Adobe Reader and Acrobat on Windows and macOS are affected by CVE-2015-7619 where the ANShareFile2 method in various 10.x/11.x releases bypasses JavaScript API execution restrictions. Affected ranges include Adobe Reader and Acrobat 10.x before 10.1.16; 11.x before 11.0.13; Acrobat and Acrobat Re...

CVE-2015-6711

Technical details for CVE-2015-6711 are not publicly available in the provided documents. No product/version specifics, impact, or remediation are disclosed here; monitor for updates.

CVE-2015-6716

Technical details about CVE-2015-6716 are not publicly provided in the connected documents. Monitor for updates from the provided references.

CVE-2015-6685

CVE-2015-6685 affects Adobe Reader/Acrobat product lines prior to the listed fixes: Adobe Reader/Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat/Reader DC Classic before 2015.006.30094, and Acrobat/Reader DC Continuous before 2015.009.20069 on Windows and macOS. The vulnerability all...

CVE-2015-7614

Technical details about CVE-2015-7614 are not publicly available in the provided documents. Monitor for updates from official advisories; the connected EUVD entries do not supply product/version/impact specifics.

CVE-2015-7615

Use-after-free vulnerability in a SaveAs feature in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2015.006.30094, and Acrobat and Acrobat Reader DC Continuous before 2015.009.20069 on Windows and OS X allows attackers to execute...

CVE-2015-6703

CVE-2015-6703 concerns the loadFlashMovie function in Adobe Reader/Acrobat 10.x (pre-10.1.16) and 11.x (pre-11.0.13), plus various DC/Classic/Continuous releases on Windows and macOS. The vulnerability could allow attackers to obtain sensitive information from process memory by supplying invalid ...