CVE-2015-6707

The ANSendForReview method in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2015.006.30094, and Acrobat and Acrobat Reader DC Continuous before 2015.009.20069 on Windows and OS X allows attackers to bypass JavaScript API executi...

CVE-2015-7617

CVE-2015-7617 is a use-after-free vulnerability in Adobe Reader and Acrobat 10.x (before 10.1.16) and 11.x (before 11.0.13), and in Acrobat/Reader DC Classic before 2015.006.30094, and DC Continuous before 2015.009.20069 on Windows and OS X. The issue arises from improper EScript exception handli...

CVE-2015-6712

Technical details for CVE-2015-6712 are not publicly available in the provided documents. Monitor for updates from vendors and security advisories.

CVE-2015-7620

Technical details for CVE-2015-7620 are not publicly available in the provided documents; monitor for updates from official advisories.

CVE-2015-6719

Technical details about CVE-2015-6719 are not publicly disclosed in the provided connected documents; no affected products, exploit vectors, or fixes are described here. Monitor EUVD/ENISA entries for updates.

CVE-2015-6720

Technical details for CVE-2015-6720 are not publicly provided in the supplied documents. The connected EUVD records mention malware generically but do not specify affected products, root cause, or remediation. Monitor for updates.

CVE-2015-7616

Technical details for CVE-2015-7616 are not provided in the connected documents; no affected products, impact, or remediation are described here. Monitor for official updates.

CVE-2015-6690

Technical details for CVE-2015-6690 are not publicly provided in the supplied documents; no affected products, exploits, or mitigations are specified here. Monitor official advisories for updates.

CVE-2015-6702

CVE-2015-6702 affects Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, as well as Acrobat/Reader DC Classic before 2015.006.30094 and DC Continuous before 2015.009.20069, on Windows and macOS. The createSquareMesh function can be invoked with invalid arguments to cause inform...

CVE-2015-6709

CVE-2015-6709 affects Adobe Reader and Acrobat: Intel/Windows and OS X platforms with versions listed in the initial description (Adobe Reader/Acrobat 10.x up to 10.1.16; 11.x up to 11.0.13; Acrobat/Reader DC Classic before 2015.006.30094; DC Continuous before 2015.009.20069). The issue allows at...

CVE-2015-6699

CVE-2015-6699 affects Adobe Reader/Acrobat on Windows and OS X: 10.x before 10.1.16, 11.x before 11.0.13, DC Classic before 2015.006.30094, and DC Continuous before 2015.009.20069. The addForegroundSprite function can reveal sensitive information from process memory via invalid arguments (informa...

CVE-2015-5586

Technical details for CVE-2015-5586 are not publicly available in the provided documents. No explicit information on affected products, root cause, impact, or remediation is given. Monitor for updates.

CVE-2015-6684

Adobe Reader/Acrobat on Windows and macOS vulnerable to a use-after-free (CVE-2015-6684) that allows arbitrary code execution. Affected: Reader 10.x up to 10.1.16, Acrobat 11.x up to 11.0.13, and Classic/Continuous lines before 2015.006.30094 and 2015.009.20069, respectively. Root cause: use-afte...

CVE-2015-6691

CVE-2015-6691 describes a use-after-free vulnerability in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2015.006.30094, and Acrobat and Acrobat Reader DC Continuous before 2015.009.20069 on Windows and OS X. The issue could let ...

Adobe Acrobat Reader DC CBSharedReviewCloseDialog Javascript API Restrictions Bypass Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe Reader DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

Adobe Reader DC setBackground Information Disclosure Vulnerability

This vulnerability allows remote attackers to gain information about the layout of memory on vulnerable installations of Adobe Reader DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...

Adobe Acrobat Reader DC Fields Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe Reader DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The flaw exists within the handling of specific...

Adobe Acrobat Reader DC ANSendForApproval Javascript API Restrictions Bypass Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe Reader DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

Adobe Reader DC createSquareMesh Information Disclosure Vulnerability

This vulnerability allows remote attackers to gain information about the layout of memory on vulnerable installations of Adobe Reader DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...

Adobe Reader Read Restrictions Bypass Sandbox Escape Vulnerability

This vulnerability allows local attackers to disclose arbitrary PDF files on vulnerable installations of Adobe Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within Acrobat Reader...