Stack overflow

Acrobat Reader DC version 21.007.20099 and earlier, 20.004.30017 and earlier and 17.011.30204 and earlier are affected by a stack buffer overflow vulnerability due to insecure handling of a crafted file, potentially resulting in arbitrary code execution in the context of the current user...

Design/Logic Flaw

Acrobat Reader DC version 21.007.20099 and earlier, 20.004.30017 and earlier and 17.011.30204 and earlier are affected by a use-after-free vulnerability in the processing of Format event actions that could result in application denial of service. Exploitation of this issue requires user interacti...

CVE-2021-44705

CVE-2021-44705 affects Adobe Acrobat/Reader DC (versions 21.007.20099 and earlier, 20.004.30017 and earlier, 17.011.30204 and earlier) with a use-after-free in the processing of Format event actions that could allow arbitrary code execution in the user context. Exploitation requires user interact...

CVE-2021-44703 Adobe Acrobat Pro DC Stack Overflow Vulnerability Arbitrary code execution

Acrobat Reader DC version 21.007.20099 and earlier, 20.004.30017 and earlier and 17.011.30204 and earlier are affected by a stack buffer overflow vulnerability due to insecure handling of a crafted file, potentially resulting in arbitrary code execution in the context of the current user...

CVE-2021-44713

CVE-2021-44713 : Adobe Acrobat Reader DC is affected by a use-after-free in the processing of Format event actions, potentially leading to a crash/Denial of Service. Affected products/versions include Acrobat Reader DC 21.007.20099 and earlier, 20.004.30017 and earlier, and 17.011.30204 and earli...

CVE-2021-44742

CVE-2021-44742 affects Adobe Acrobat Reader DC (versions including 21.007.20099 and earlier; also listed as 20.004.30017 and 17.011.30204 and earlier). The issue is an out-of-bounds read during parsing of a crafted PDF, which could allow code execution in the context of the current user. Exploita...

CVE-2021-44704

CVE-2021-44704 is a use-after-free in Adobe Acrobat/Reader DC related to the processing of Format event actions that could allow arbitrary code execution in the current user context. Affected are Acrobat Reader DC versions 21.007.20099 and earlier, 20.004.30017 and earlier, and 17.011.30204 and e...

CVE-2021-44708

The CVE-2021-44708 entry describes a heap-overflow vulnerability in Adobe Acrobat/Reader DC caused by insecure handling of a crafted file. Affected versions include Acrobat Reader DC 21.007.20099 and earlier, 20.004.30017 and earlier, and 17.011.30204 and earlier. Exploitation can lead to arbitra...

CVE-2021-44708 Adobe Acrobat Pro DC Heap Overflow could lead to Arbitrary code execution

Acrobat Reader DC version 21.007.20099 and earlier, 20.004.30017 and earlier and 17.011.30204 and earlier are affected by a heap overflow vulnerability due to insecure handling of a crafted file, potentially resulting in arbitrary code execution in the context of the current user. Exploitation of...

CVE-2021-44715 Adobe Acrobat Reader DC Out-of-Bounds Read Information Disclosure Vulnerability

Acrobat Reader DC version 21.007.20099 and earlier, 20.004.30017 and earlier and 17.011.30204 and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this...

CVE-2021-44702

CVE-2021-44702 affects Adobe Acrobat Reader DC ActiveX (AxAcroPDF) in multiple legacy builds (e.g., 21.007.20099 and earlier; 20.004.30017 and earlier; 17.011.30204 and earlier). It is an information-disclosure flaw that could leak NTLMv2 credentials to an attacker, with exploitation requiring us...

CVE-2021-45064

CVE-2021-45064 is a use-after-free vulnerability in Adobe Acrobat Reader DC related to the processing of Format event actions, potentially allowing arbitrary code execution in the context of the current user. Affected products/versions (per sources): Acrobat Reader DC and Reader prior to 21.007.2...

CVE-2021-45061

CVE-2021-45061 is an out-of-bounds write vulnerability in Adobe Acrobat Reader DC font parsing that could allow arbitrary code execution in the context of the current user. Exploitation requires user interaction (victim opens a malicious file). Affected versions include Acrobat Reader DC 21.007.2...

CVE-2021-44706

CVE-2021-44706 is a use‑after‑free vulnerability in Adobe Acrobat Reader DC affecting the processing of Format event actions, leading to arbitrary code execution in the context of the current user. Affected products/versions include Acrobat Reader DC 21.007.20099 and earlier, 20.004.30017 and ear...

CVE-2021-45060

CVE-2021-45060 affects Adobe Acrobat Reader DC versions 21.007.20099 and earlier, 20.004.30017 and earlier, and 17.011.30204 and earlier. The issue is an out-of-bounds read during parsing of a crafted file, which could cause a read past the end of an allocated memory structure and enable code exe...

CVE-2021-45063

Adobe Acrobat Reader DC contains a use-after-free vulnerability (CVE-2021-45063) in the handling of Format event actions, affecting versions 21.007.20099 and earlier, 20.004.30017 and earlier, and 17.011.30204 and earlier. Root cause is a use-after-free that can disclose memory contents; exploita...

CVE-2021-44711

CVE-2021-44711 affects Adobe Acrobat Reader DC and related components (versions 21.007.20099 and earlier; 20.004.30017 and earlier; 17.011.30204 and earlier) with an Integer Overflow/Wraparound in annotation gestures that can lead to arbitrary code execution under the current user. Exploitation r...

CVE-2021-44741

Adobe Acrobat Reader DC is affected by CVE-2021-44741: a NULL pointer dereference when parsing a specially crafted file. This allows an unauthenticated attacker to cause an application denial-of-service in the context of the current user, with exploitation requiring user interaction (victim must ...

CVE-2021-44741 Adobe Acrobat Pro DC NULL Pointer Dereference could lead to Application-denial-of-service

Acrobat Reader DC version 21.007.20099 and earlier, 20.004.30017 and earlier and 17.011.30204 and earlier are affected by a Null pointer dereference vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to achieve an application...

CVE-2021-45068

CVE-2021-45068 affects Adobe Acrobat Reader DC and related products with an out-of-bounds write in font parsing that can lead to arbitrary code execution in the context of the current user. Exploitation requires user interaction (victim opens a malicious file). Affected versions include Acrobat R...