CVE-2022-27792

CVE-2022-27792 is an out-of-bounds write vulnerability in font parsing that could enable arbitrary code execution under the current user. Affected products include Acrobat Reader DC and older Acrobat/Reader tiers, with exploitation requiring a user to open a malicious file. The issue is supported...

CVE-2024-49532

CVE-2024-49532 affects Adobe Acrobat Reader (DC/Continuous/Classic) across multiple builds (e.g., 24.005.20307, 24.001.30213, 24.001.30193, 20.005.30730, 20.005.30710 and earlier). The issue is an out-of-bounds read that could disclose sensitive memory and potentially bypass ASLR; exploitation re...

CVE-2019-8060

CVE-2019-8060 is a command injection vulnerability in Adobe Acrobat/Reader. Affected versions include 2019.012.20035 and earlier, 2017.011.30142/30143 and earlier, and 2015.006.30497/30498 and earlier, with successful exploitation enabling arbitrary code execution. Several connected advisories (e...

CVE-2019-8057

CVE-2019-8057 is an Adobe Acrobat/Reader use-after-free vulnerability affecting multiple versions (e.g., 2019.012.20035 and earlier; 2017.011.30142/30143; 2015.006.30497/30498). The Red Hat and NVD entries describe successful exploitation as leading to arbitrary code execution. Connected document...

CVE-2019-8193

Adobe Acrobat and Reader are affected by CVE-2019-8193 (out-of-bounds read) in multiple older builds (2019.012.20040 and earlier; 2017.011.30148 and earlier; 2015.006.30503 and earlier). Successful exploitation could lead to information disclosure. Mitigation: apply the APSB19-49 advisory and upg...

CVE-2019-8216

CVE-2019-8216 affects Adobe Acrobat and Adobe Reader. The vulnerability is an out-of-bounds read in versions: 2019.012.20040 and earlier, 2017.011.30148 and earlier, 2015.006.30503 and earlier. The impact is information disclosure if exploited. Public details in the provided documents also refere...

CVE-2024-30279

CVE-2024-30279 affects Adobe Acrobat Reader DC/Classic installations (e.g., 20.005.30574, 24.002.20736 and earlier). The issue is an out-of-bounds write that could allow arbitrary code execution in the user’s context, with exploitation requiring user interaction (the victim opening a malicious fi...

CVE-2026-34622

Acrobat Reader is affected by a Prototype Pollution vulnerability (Improperly Controlled Modification of Object Prototype Attributes, CWE-1321). Affected versions include 26.001.21411, 24.001.30360, 24.001.30362 and earlier. The issue could allow arbitrary code execution in the context of the cur...

CVE-2019-8161

CVE-2019-8161 describes a type confusion vulnerability affecting Adobe Acrobat and Reader. Affected software versions include 2019.012.20040 and earlier, 2017.011.30148 and earlier, and 2015.006.30503 and earlier. Successful exploitation could lead to arbitrary code execution. The issue is docume...

CVE-2019-8103

CVE-2019-8103 is an out-of-bounds read vulnerability in Adobe Acrobat and Reader. Affected products include Adobe Acrobat/Reader versions 2019.012.20035 and earlier, 2017.011.30142/30143, and 2015.006.30497/30498. Successful exploitation could lead to information disclosure. Connected sources (NV...

CVE-2024-41869

Adobe Acrobat/Reader across Windows, macOS, and related continuums (DC/Classic/Continuous) is affected by CVE-2024-41869 (Use-After-Free) and CVE-2024-45112 (Type Confusion), enabling arbitrary code execution in the context of the current user. Exploitation requires user interaction (opening a ma...

CVE-2019-8100

Adobe Acrobat/Reader CVE-2019-8100 is an out-of-bounds write vulnerability affecting multiple older builds (e.g., 2019.012.20035 and earlier, 2017.011.30142/43, 2015.006.30497/98). Successful exploitation could yield arbitrary code execution. The connected Nessus/PRION/OpenVAS entries for APSB19-...

CVE-2020-29075

CVE-2020-29075 affects Adobe Acrobat/Reader (Acrobat Reader DC versions 2020.013.20066 and earlier, 2020.001.30010 and earlier, and 2017.011.30180 and earlier). The root cause is an information-disclosure vulnerability where two JavaScript functions perform DNS lookups when a PDF is loaded from t...

CVE-2023-21586

CVE-2023-21586 — Adobe Acrobat Reader : NULL pointer dereference vulnerability affecting versions 22.003.20282 and earlier, 22.003.20281 and earlier, and 20.005.30418 and earlier. An unauthenticated attacker could cause an application denial-of-service, with exploit requiring user interaction (vi...

CVE-2019-8042

CVE-2019-8042 affects Adobe Acrobat and Reader (versions listed in the Initial document) due to a heap overflow vulnerability that could lead to arbitrary code execution on successful exploitation. Public sources in the Connected documents corroborate a memory-corruption vector in these products;...

CVE-2019-8237

CVE-2019-8237 affects Adobe Acrobat and Reader, with versions including 2019.012.20035 and earlier, 2017.011.30142/30143, and 2015.006.30497/30498. The root issue is an insufficiently robust encryption implementation, which could allow an attacker to bypass security features on successful exploit...

CVE-2022-44519

CVE-2022-44519 affects Acrobat Reader DC (versions 22.001.20085 and earlier, 20.005.3031x and earlier, 17.012.30205 and earlier). Root cause: a use-after-free in a component used when opening a malicious file, leading to possible disclosure of sensitive memory and the ability to bypass ASLR. Expl...

CVE-2024-30280

The CVE-2024-30280 entry affects Adobe Acrobat Reader (versions 20.005.30574, 24.002.20736 and earlier) and is an out-of-bounds read bug triggered while parsing a crafted file. An attacker could execute code in the user’s context, and exploitation requires user interaction (victim opens a malicio...

CVE-2022-24101

CVE-2022-24101 is an Adobe Acrobat/Reader DC use-after-free information-disclosure vulnerability. Affected products include Acrobat Reader DC and related Acrobat/Reader versions listed in the sources, with exploitation requiring user interaction (victim opens a malicious file) and potential bypas...

CVE-2022-28237

CVE-2022-28237 affects Acrobat Reader DC and related Adobe products. A use-after-free in the processing of annotations could allow arbitrary code execution in the context of the current user. Exploitation requires user interaction: a victim must open a malicious file. Affected versions include Ac...

CVE-2024-20765

CVE-2024-20765 affects Adobe Acrobat Reader variants on Windows and Mac (e.g., Reader DC classic 2020/Continuous; affected versions include 20.005.30539, 23.008.20470 and earlier). The issue is a Use-After-Free vulnerability in PDF handling that can lead to arbitrary code execution in the context...

CVE-2024-49534

CVE-2024-49534 affects Adobe Acrobat Reader versions including 24.005.20307, 24.001.30213, 24.001.30193, 20.005.30730, 20.005.30710 and earlier. The vulnerability is an out-of-bounds read that could disclose sensitive memory and potentially bypass ASLR. Exploitation requires user interaction (the...

CVE-2022-35665

CVE-2022-35665 is a Use-After-Free vulnerability in Adobe Acrobat Reader affecting multiple legacy releases (e.g., 22.001.20169 and earlier; 20.005.30362 and earlier; 17.012.30249 and earlier). The underlying issue is a use-after-free in memory management that can lead to arbitrary code execution...

CVE-2022-44518

CVE-2022-44518 affects Adobe Acrobat Reader DC (and earlier/Classic variants) with a use-after-free vulnerability that could lead to arbitrary code execution in the current user context. The issue requires user interaction: a victim must open a malicious file. Public details list affected product...

CVE-2024-49533

CVE-2024-49533 affects Adobe Acrobat Reader family (DC/Classic/Continuous) versions including 24.005.20307, 24.001.30213, 24.001.30193, 20.005.30730, 20.005.30710 and earlier. The issue is an out-of-bounds read that could disclose sensitive memory and potentially bypass ASLR. Exploitation require...

CVE-2017-16384

The CVE-2017-16384 entry describes a buffer over-read in Adobe Acrobat/Reader (affecting 2017.012.20098 and earlier, 2017.011.30066 and earlier, 2015.006.30355 and earlier, and 11.0.22 and earlier) in the exif processing module for PNG files during XPS conversion. The vulnerability arises from in...

CVE-2022-44513

CVE-2022-44513 affects Adobe Acrobat Reader DC (versions including 22.001.20085 and earlier; 20.005.3031x and earlier; 17.012.30205 and earlier). The vulnerability is an out-of-bounds write in the processing of certain files that could lead to arbitrary code execution in the context of the curren...

CVE-2019-8096

CVE-2019-8096 affects Adobe Acrobat and Reader (various legacy builds up to 2019.012.20035 and earlier; 2017.x and 2015.x series). The vulnerability is an out-of-bounds read in the affected components, with the impact described as information disclosure if exploited. No exploit details are provid...

CVE-2022-34229

CVE-2022-34229 affects Adobe Acrobat Reader DC/Acrobat Reader with the AcroForm Use-After-Free vulnerability that allows arbitrary code execution in the current user context. Exploitation requires the user to open a crafted file; affected versions are older than 17.012.30249 (Acrobat/Reader Class...

CVE-2019-8053

Adobe Acrobat/Reader CVE-2019-8053 is a use-after-free vulnerability affecting multiple old releases (including 2015.006.30497/30498, 2017.011.30142/30143, 2019.012.20035 and earlier). Exploitation could lead to arbitrary code execution. Connected documents corroborate the vulnerability class and...

CVE-2019-8061

CVE-2019-8061 affects Adobe Acrobat and Reader. The related entries indicate a use-after-free vulnerability that could allow arbitrary code execution. Affected products include Adobe Acrobat/Reader versions 2019.012.20035 and earlier, 2017.011.30142 and earlier, and 2015.006.30497/30498 and earli...

CVE-2019-8095

CVE-2019-8095 : Concrete details in connected docs describe an out-of-bounds read vulnerability in Adobe Acrobat and Reader . Affected products include versions such as 2019.012.20035 and earlier, 2017.011.30142/30143 and earlier, and 2015.006.30497/30498 and earlier. The impact is limited to pos...

CVE-2019-8174

CVE-2019-8174 is an untrusted pointer dereference vulnerability in Adobe Acrobat/Reader. Affected: Adobe Acrobat/Reader versions including 2019.012.20040 and earlier; 2017.011.30148 and earlier; 2015.006.30503 and earlier. Exploitation could lead to arbitrary code execution with network access re...

CVE-2019-8181

Adobe Acrobat and Reader are affected by a use-after-free vulnerability (CVE-2019-8181) in multiple older builds (e.g., 2019.012.20040 and earlier, 2017.011.30148 and earlier, 2015.006.30503 and earlier). Successful exploitation could lead to arbitrary code execution. The issue is documented unde...

CVE-2022-24102

CVE-2022-24102 is an Adobe Acrobat/Reader DC use-after-free vulnerability enabling arbitrary code execution in the context of the current user. Exploitation requires user interaction (opening a malicious file). Concrete details found in connected Nessus plugin: affected products include Acrobat R...

CVE-2023-44359

Technical details about CVE-2023-44359 are not publicly available in the provided documents; no affected product/version or impact is specified beyond the initial description. Monitor for updates.

CVE-2019-8052

CVE-2019-8052 is an out-of-bounds read vulnerability in Adobe Acrobat and Adobe Reader. Affected are versions 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2015.006.30497 and earlier, and 2015.006.30498 and earlier. Exploitation could lead to information disclosure. The provided documen...

CVE-2019-8098

CVE-2019-8098 is an out-of-bounds write vulnerability in Adobe Acrobat and Reader, affecting multiple older builds (including 2015.006.30497/30498, 2017.011.30142/30143, 2019.012.20035 and earlier). Successful exploitation could lead to arbitrary code execution. The related NVD entry assigns a CV...

CVE-2022-28236

CVE-2022-28236 (Adobe Acrobat/Reader DC). Affected products: Acrobat Reader DC 22.001.20085 and earlier; 20.005.3031x and earlier; 17.012.30205 and earlier. Vulnerability: out-of-bounds write in parsing that can lead to arbitrary code execution in the current user context. Exploitation requires u...

CVE-2023-44371

CVE-2023-44371 affects Adobe Acrobat Reader versions 23.006.20360 and 20.005.30524 (and earlier). The issue is a Use After Free in a component used during file handling, leading to arbitrary code execution in the context of the current user. exploitation requires user interaction (victim must ope...

CVE-2019-8102

CVE-2019-8102 affects Adobe Acrobat and Adobe Reader, specifically versions 2019.012.20035 and earlier, 2017.011.30142/30143 and earlier, and 2015.006.30497/30498 and earlier. The vulnerability is an out-of-bounds read that could lead to information disclosure. Root cause is an out-of-bounds read...

CVE-2019-8214

CVE-2019-8214 affects Adobe Acrobat and Reader; use-after-free vulnerability in versions 2019.012.20040 and earlier, 2017.011.30148 and earlier, and 2015.006.30503 and earlier could allow arbitrary code execution on successful exploitation. The issue is documented in APSB19-49 and relates to a me...

CVE-2019-8056

Adobe Acrobat/Reader CVE-2019-8056 is a use-after-free vulnerability affecting multiple older builds (2019.012.20035 and earlier; 2017.011.30142/30143; 2015.006.30497/30498). Successful exploitation could lead to arbitrary code execution. The connected sources reference APSB19-41 as the mitigatio...

CVE-2022-44512

Adobe Acrobat Reader DC is affected by out-of-bounds write (CWE-787) in parsing that could lead to arbitrary code execution in the current user context. Affected versions include 22.001.20085 and earlier, 20.005.3031x and earlier, and 17.012.30205 and earlier. Exploitation requires user interacti...

CVE-2019-8050

CVE-2019-8050 concerns heap overflow in Adobe Acrobat/Reader. Connected sources enumerate affected versions across multiple tracks (2019.012.20035 and earlier; 2017.011.30142/30143 and earlier; 2015.006.30497/30498 and earlier) and describe that successful exploitation could lead to arbitrary cod...

CVE-2022-27800

The CVE-2022-27800 entry describes a use-after-free flaw in Adobe Acrobat/Reader DC related to annotation processing. Affected products include Acrobat Reader DC (versions 22.001.20085 and earlier), 20.005.3031x and 17.012.30205 and earlier. The vulnerability allows arbitrary code execution in th...

CVE-2022-34216

Adobe Acrobat Reader DC/Classic products are affected by CVE-2022-34216 and related CVEs (e.g., 34219/34220/34223/34224/34225/34227/34229/34230/34228) describing a Use-After-Free condition in parsing of PDF content that can lead to arbitrary code execution in the context of the current user. Expl...

CVE-2023-44366

Adobe Acrobat Reader versions 23.006.20360 and earlier, and 20.005.30524 and earlier, are affected by an out-of-bounds write vulnerability that could lead to arbitrary code execution in the user's context when a malicious file is opened. This CVE (CVE-2023-44366) is documented with a high impact ...

CVE-2019-16451

CVE-2019-16451 involves a heap overflow in Adobe Acrobat and Reader. Affected products and versions include Adobe Acrobat/Reader 2019.021.20056 and earlier, 2017.011.30152 and earlier, 2017.011.30155 and earlier, and 2015.006.30505 and earlier. Successful exploitation could lead to arbitrary code...

CVE-2019-8219

Adobe Acrobat/Reader CVE-2019-8219 is a use-after-free vulnerability affecting multiple old builds (e.g., 2019.012.20040 and earlier, 2017.011.30148 and earlier, 2015.006.30503 and earlier). The issue, documented under APSB19-49, can lead to arbitrary code execution on successful exploitation. Ma...