CVE-2025-27174

CVE-2025-27174 affects Adobe Acrobat Reader with Use After Free (CWE-416) in versions 24.001.30225, 20.005.30748, 25.001.20428 and earlier. The vulnerability enables arbitrary code execution in the context of the current user and requires user interaction (open a malicious file). Affected product...

CVE-2025-27162

CVE-2025-27162 affects Adobe Acrobat Reader versions 24.001.30225, 20.005.30748, 25.001.20428 and earlier. The issue is an Access of Uninitialized Pointer (CWE-824) that could lead to arbitrary code execution in the context of the current user. Exploitation requires user interaction (victim must ...

CVE-2025-27160 Acrobat Reader | Use After Free (CWE-416)

Acrobat Reader versions 24.001.30225, 20.005.30748, 25.001.20428 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious...

CVE-2025-27159 Acrobat Reader | Use After Free (CWE-416)

Acrobat Reader versions 24.001.30225, 20.005.30748, 25.001.20428 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious...

CVE-2025-27159 Acrobat Reader | Use After Free (CWE-416)

Acrobat Reader versions 24.001.30225, 20.005.30748, 25.001.20428 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious...

CVE-2025-27159

CVE-2025-27159 is an Adobe Acrobat Reader Use-After-Free vulnerability that can lead to arbitrary code execution in the context of the current user. A successful exploit requires user interaction (the victim must open a malicious file). Affected versions include Acrobat Reader 24.001.30225, 20.00...

CVE-2025-27163 Acrobat Reader | Out-of-bounds Read (CWE-125)

Acrobat Reader versions 24.001.30225, 20.005.30748, 25.001.20428 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires...

CVE-2025-27163

CVE-2025-27163 affects Adobe Acrobat Reader; an out-of-bounds read could disclose memory and bypass ASLR. Affected versions include 24.001.30225, 20.005.30748, 25.001.20428 and earlier. Exploitation requires user interaction (open a malicious file). Mitigation: update to the latest version per ad...

CVE-2025-27169

Affected software: Adobe Illustrator versions 29.2.1, 28.7.4 and earlier. Vulnerability: Out-of-bounds write (CWE-787) that could allow arbitrary code execution in the context of the current user. Root cause / impact (as described): An out-of-bounds write vulnerability exists in Illustrator that ...

CVE-2025-27170 Illustrator | NULL Pointer Dereference (CWE-476)

Illustrator versions 29.2.1, 28.7.4 and earlier are affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial of service condition. Exploitation of this iss...

CVE-2025-27170 Illustrator | NULL Pointer Dereference (CWE-476)

Illustrator versions 29.2.1, 28.7.4 and earlier are affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial of service condition. Exploitation of this iss...

CVE-2025-27168 Illustrator | Stack-based Buffer Overflow (CWE-121)

Illustrator versions 29.2.1, 28.7.4 and earlier are affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2025-27168

CVE-2025-27168 corresponds to a stack-based buffer overflow in Adobe Illustrator versions 29.2.1, 28.7.4 and earlier that could lead to arbitrary code execution in the context of the current user. Exploitation requires user interaction—victim must open a malicious file. Affected component: Illust...

CVE-2025-24449

CVE-2025-24449: Adobe Illustrator (versions 29.2.1, 28.7.4 and earlier) contains an out-of-bounds read vulnerability that could disclose memory and bypass mitigations like ASLR. Exploitation requires user interaction (victim opens a malicious file). Adobe released APSB25-17 security updates addre...

CVE-2025-24449 Illustrator | Out-of-bounds Read (CWE-125)

Illustrator versions 29.2.1, 28.7.4 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a...

CVE-2025-27166

Adobe InDesign Desktop (ID20.1, ID19.5.2 and earlier) is affected by CVE-2025-27166: an out-of-bounds write that can lead to arbitrary code execution in the context of the current user. Exploitation requires user interaction (opening a malicious file). Mitigation: Adobe’s APSB25-19 security updat...

CVE-2025-27175

CVE-2025-27175 affects Adobe InDesign Desktop (ID20.1, ID19.5.2 and earlier). The issue is an out-of-bounds write in InDesign’s handling of a file, leading to arbitrary code execution in the context of the current user. Exploitation requires user interaction: the victim must open a malicious file...

CVE-2025-27175 InDesign Desktop | Out-of-bounds Write (CWE-787)

InDesign Desktop versions ID20.1, ID19.5.2 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2025-27177

Adobe InDesign Desktop (ID20.1, ID19.5.2 and earlier) is affected by a heap-based buffer overflow (CVE-2025-27177) that could lead to arbitrary code execution in the context of the current user. Exploitation requires user interaction: a victim must open a malicious file. Affected versions and roo...

CVE-2025-27178

Adobe InDesign Desktop (IDs ID20.1, ID19.5.2 and earlier) is affected by an out-of-bounds write vulnerability (CWE-787) that could allow arbitrary code execution in the context of the current user. Exploitation requires the user to open a malicious file, i.e., user interaction is required. Affect...