CVE-2015-6684

Adobe Reader/Acrobat on Windows and macOS vulnerable to a use-after-free (CVE-2015-6684) that allows arbitrary code execution. Affected: Reader 10.x up to 10.1.16, Acrobat 11.x up to 11.0.13, and Classic/Continuous lines before 2015.006.30094 and 2015.009.20069, respectively. Root cause: use-afte...

CVE-2015-6703

CVE-2015-6703 concerns the loadFlashMovie function in Adobe Reader/Acrobat 10.x (pre-10.1.16) and 11.x (pre-11.0.13), plus various DC/Classic/Continuous releases on Windows and macOS. The vulnerability could allow attackers to obtain sensitive information from process memory by supplying invalid ...

CVE-2015-7619

Adobe Reader and Acrobat on Windows and macOS are affected by CVE-2015-7619 where the ANShareFile2 method in various 10.x/11.x releases bypasses JavaScript API execution restrictions. Affected ranges include Adobe Reader and Acrobat 10.x before 10.1.16; 11.x before 11.0.13; Acrobat and Acrobat Re...

CVE-2015-6725

The ANSendForSharedReview method in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2015.006.30094, and Acrobat and Acrobat Reader DC Continuous before 2015.009.20069 on Windows and OS X allows attackers to bypass JavaScript API...

CVE-2015-6712

The ANSendApprovalToAuthorEnabled method in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2015.006.30094, and Acrobat and Acrobat Reader DC Continuous before 2015.009.20069 on Windows and OS X allows attackers to bypass JavaScri...

CVE-2015-6689

CVE-2015-6689 is a use-after-free vulnerability in Adobe Reader and Acrobat affecting 10.x (pre-10.1.16) and 11.x (pre-11.0.13), and Adobe Acrobat/Reader DC Classic before 2015.006.30094 or DC Continuous before 2015.009.20069, on Windows and macOS. The flaw is triggered by a crafted WillSave docu...

CVE-2015-7617

CVE-2015-7617 is a use-after-free vulnerability in Adobe Reader and Acrobat 10.x (before 10.1.16) and 11.x (before 11.0.13), and in Acrobat/Reader DC Classic before 2015.006.30094, and DC Continuous before 2015.009.20069 on Windows and OS X. The issue arises from improper EScript exception handli...

CVE-2015-6711

Technical details for CVE-2015-6711 are not publicly available in the provided documents. No product/version specifics, impact, or remediation are disclosed here; monitor for updates.

CVE-2015-6699

CVE-2015-6699 affects Adobe Reader/Acrobat on Windows and OS X: 10.x before 10.1.16, 11.x before 11.0.13, DC Classic before 2015.006.30094, and DC Continuous before 2015.009.20069. The addForegroundSprite function can reveal sensitive information from process memory via invalid arguments (informa...

CVE-2015-6707

The ANSendForReview method in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2015.006.30094, and Acrobat and Acrobat Reader DC Continuous before 2015.009.20069 on Windows and OS X allows attackers to bypass JavaScript API executi...

CVE-2015-7616

The ANVerifyComments method in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2015.006.30094, and Acrobat and Acrobat Reader DC Continuous before 2015.009.20069 on Windows and OS X allows attackers to bypass JavaScript API...

CVE-2015-6710

The CBBBRInit method in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2015.006.30094, and Acrobat and Acrobat Reader DC Continuous before 2015.009.20069 on Windows and OS X allows attackers to bypass JavaScript API execution...

CVE-2015-6690

Use-after-free vulnerability in the popUpMenuEx method in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2015.006.30094, and Acrobat and Acrobat Reader DC Continuous before 2015.009.20069 on Windows and OS X allows attackers to...

CVE-2015-6716

Technical details about CVE-2015-6716 are not publicly provided in the connected documents. Monitor for updates from the provided references.

CVE-2015-6698

Heap-based buffer overflow in the AcroForm implementation in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2015.006.30094, and Acrobat and Acrobat Reader DC Continuous before 2015.009.20069 on Windows and OS X allows attackers t...

CVE-2015-5586

Technical details for CVE-2015-5586 are not publicly available in the provided documents. No explicit information on affected products, root cause, impact, or remediation is given. Monitor for updates.

CVE-2015-7615

Use-after-free vulnerability in a SaveAs feature in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2015.006.30094, and Acrobat and Acrobat Reader DC Continuous before 2015.009.20069 on Windows and OS X allows attackers to execute...

CVE-2015-6713

Technical details for CVE-2015-6713 are not publicly provided in the connected documents. Monitor EUVD entries for updates.

CVE-2015-6702

CVE-2015-6702 affects Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, as well as Acrobat/Reader DC Classic before 2015.006.30094 and DC Continuous before 2015.009.20069, on Windows and macOS. The createSquareMesh function can be invoked with invalid arguments to cause inform...

CVE-2015-6696

CVE-2015-6696 is a heap-based buffer overflow in Adobe Reader/Acrobat components (notably AcroForm/AGM.dll) on Windows and macOS. Affected are Adobe Reader/Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat/Reader DC Classic before 2015.006.30094 and DC Continuous before 2015.009.20069;...