CVE-2015-6684

Adobe Reader/Acrobat on Windows and macOS vulnerable to a use-after-free (CVE-2015-6684) that allows arbitrary code execution. Affected: Reader 10.x up to 10.1.16, Acrobat 11.x up to 11.0.13, and Classic/Continuous lines before 2015.006.30094 and 2015.009.20069, respectively. Root cause: use-afte...

CVE-2015-6703

CVE-2015-6703 concerns the loadFlashMovie function in Adobe Reader/Acrobat 10.x (pre-10.1.16) and 11.x (pre-11.0.13), plus various DC/Classic/Continuous releases on Windows and macOS. The vulnerability could allow attackers to obtain sensitive information from process memory by supplying invalid ...

CVE-2015-7619

Adobe Reader and Acrobat on Windows and macOS are affected by CVE-2015-7619 where the ANShareFile2 method in various 10.x/11.x releases bypasses JavaScript API execution restrictions. Affected ranges include Adobe Reader and Acrobat 10.x before 10.1.16; 11.x before 11.0.13; Acrobat and Acrobat Re...

CVE-2015-6725

The ANSendForSharedReview method in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2015.006.30094, and Acrobat and Acrobat Reader DC Continuous before 2015.009.20069 on Windows and OS X allows attackers to bypass JavaScript API...

CVE-2015-6712

The ANSendApprovalToAuthorEnabled method in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2015.006.30094, and Acrobat and Acrobat Reader DC Continuous before 2015.009.20069 on Windows and OS X allows attackers to bypass JavaScri...

CVE-2015-6711

Technical details for CVE-2015-6711 are not publicly available in the provided documents. No product/version specifics, impact, or remediation are disclosed here; monitor for updates.

CVE-2015-6699

CVE-2015-6699 affects Adobe Reader/Acrobat on Windows and OS X: 10.x before 10.1.16, 11.x before 11.0.13, DC Classic before 2015.006.30094, and DC Continuous before 2015.009.20069. The addForegroundSprite function can reveal sensitive information from process memory via invalid arguments (informa...

CVE-2015-6707

The ANSendForReview method in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2015.006.30094, and Acrobat and Acrobat Reader DC Continuous before 2015.009.20069 on Windows and OS X allows attackers to bypass JavaScript API executi...

CVE-2015-7616

The ANVerifyComments method in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2015.006.30094, and Acrobat and Acrobat Reader DC Continuous before 2015.009.20069 on Windows and OS X allows attackers to bypass JavaScript API...

CVE-2015-6710

The CBBBRInit method in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2015.006.30094, and Acrobat and Acrobat Reader DC Continuous before 2015.009.20069 on Windows and OS X allows attackers to bypass JavaScript API execution...

CVE-2015-5586

Technical details for CVE-2015-5586 are not publicly available in the provided documents. No explicit information on affected products, root cause, impact, or remediation is given. Monitor for updates.

CVE-2015-6702

CVE-2015-6702 affects Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, as well as Acrobat/Reader DC Classic before 2015.006.30094 and DC Continuous before 2015.009.20069, on Windows and macOS. The createSquareMesh function can be invoked with invalid arguments to cause inform...

CVE-2015-6696

CVE-2015-6696 is a heap-based buffer overflow in Adobe Reader/Acrobat components (notably AcroForm/AGM.dll) on Windows and macOS. Affected are Adobe Reader/Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat/Reader DC Classic before 2015.006.30094 and DC Continuous before 2015.009.20069;...

CVE-2015-6692

CVE-2015-6692 affects Adobe Reader and Acrobat 10.x prior to 10.1.16 and 11.x prior to 11.0.13, plus related DC Classic/Continuous builds on Windows and macOS. The vulnerability is a buffer overflow in multiple components that can allow an attacker to obtain sensitive information via unspecified ...

CVE-2015-6692

Buffer overflow in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2015.006.30094, and Acrobat and Acrobat Reader DC Continuous before 2015.009.20069 on Windows and OS X allows attackers to obtain sensitive information via...

CVE-2015-6721

Technical details about CVE-2015-6721 are not provided in the connected documents. Public information here is limited. Monitor EUVD entries for updates; no confirmed exploit vectors or affected products are disclosed in the supplied sources.

CVE-2015-6717

Technical details for CVE-2015-6717 are not publicly available in the provided connected documents. Monitor for official updates from Adobe and vulnerability trackers.

CVE-2015-6691

CVE-2015-6691 describes a use-after-free vulnerability in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2015.006.30094, and Acrobat and Acrobat Reader DC Continuous before 2015.009.20069 on Windows and OS X. The issue could let ...

CVE-2015-6713

Technical details for CVE-2015-6713 are not publicly provided in the connected documents. Monitor EUVD entries for updates.

CVE-2015-6709

The CBBBRInvite method in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2015.006.30094, and Acrobat and Acrobat Reader DC Continuous before 2015.009.20069 on Windows and OS X allows attackers to bypass JavaScript API execution...