CVE-2022-28238

CVE-2022-28238 affects Acrobat Reader DC and related Adobe products on multiple versions (e.g., 22.001.20085 and earlier, 20.005.3031x and earlier, 17.012.30205 and earlier). The vulnerability is a use-after-free in the processing of annotations that could allow arbitrary code execution in the co...

CVE-2022-28243

CVE-2022-28243 concerns an out-of-bounds read in Acrobat Reader DC when parsing a crafted file, potentially allowing code execution in the user’s context. Affected are Acrobat Reader DC 22.001.2011x and earlier, 20.005.3033x and earlier, and 17.012.3022x and earlier. The issue requires user inter...

CVE-2019-8055

CVE-2019-8055 affects Adobe Acrobat and Adobe Reader. The issue is a use-after-free in multiple legacy builds (including 2019.012.20035 and earlier, 2017.011.30142/30143, 2015.006.30497/30498). Successful exploitation could lead to arbitrary code execution. Connected sources confirm the vulnerabi...

CVE-2022-27785

Adobe Acrobat Reader DC and related versions are affected by a use‑after‑free vulnerability in font processing that can lead to arbitrary code execution in the context of the current user. Exploitation requires user interaction, typically by opening a crafted file. Affected versions include Acrob...

CVE-2022-35666

Adobe Acrobat Reader is affected by CVE-2022-35666 (and related CVEs) due to an Improper Input Validation vulnerability that could lead to arbitrary code execution in the context of the current user. Affected are multiple products/versions including 22.001.20169 and earlier, 20.005.30362 and earl...

CVE-2019-8054

CVE-2019-8054 is an use-after-free vulnerability in Adobe Acrobat and Reader, affecting versions including 2019.012.20035 and earlier, 2017.011.30142/43, and 2015.006.30497/98. Successful exploitation could result in arbitrary code execution. The Red Hat advisory and multiple NESsus/OpenVAS entri...

CVE-2019-8165

CVE-2019-8165 affects Adobe Acrobat and Adobe Reader prior to the listed patched versions. The vulnerability is an out-of-bounds write in Acrobat/Reader components, with the NVD entry noting that successful exploitation could lead to arbitrary code execution. Affected versions include 2019.012.20...

CVE-2019-8179

CVE-2019-8179 affects Adobe Acrobat and Reader, versions including 2019.012.20040 and earlier, 2017.011.30148 and earlier, 2015.006.30503 and earlier. The flaw is a use-after-free in Adobe’s memory handling that could allow remote code execution on successful exploitation. The vulnerability is do...

CVE-2019-8183

Adobe Acrobat and Reader are affected by a heap overflow vulnerability (CVE-2019-8183) impacting versions 2019.012.20040 and earlier, 2017.011.30148 and earlier, and 2015.006.30503 and earlier. Successful exploitation could lead to arbitrary code execution. The connected sources confirm the vulne...

CVE-2019-8219

Adobe Acrobat/Reader CVE-2019-8219 is a use-after-free vulnerability affecting multiple old builds (e.g., 2019.012.20040 and earlier, 2017.011.30148 and earlier, 2015.006.30503 and earlier). The issue, documented under APSB19-49, can lead to arbitrary code execution on successful exploitation. Ma...

CVE-2022-28242

Technical details for CVE-2022-28242 are not provided in the supplied documents. No affected products, impact, or fixes are disclosed here. Monitor official advisories and vendor updates for public details and remediation.

CVE-2019-8105

CVE-2019-8105 affects Adobe Acrobat and Reader. The provided documents identify an out-of-bounds read vulnerability in the product family, with successful exploitation potentially leading to information disclosure. Affected versions include Adobe Acrobat and Reader 2019.012.20035 and earlier, 201...

CVE-2021-40728

CVE-2021-40728 is a use-after-free in Adobe Acrobat Reader DC’s GetURL handling on a global window object, capable of arbitrary code execution in the current user context. Affected versions (as documented): 21.007.20095 and earlier, 21.007.20096 and earlier, 20.004.30015 and earlier, and 17.011.3...

CVE-2022-28250

Adobe Acrobat Reader DC/Acrobat-related components are affected by a use-after-free vulnerability that can disclose memory and bypass ASLR. Affected versions include Acrobat Reader DC 22.001.2011x and earlier, 20.005.3033x and earlier, and 17.012.3022x and earlier. Exploitation requires user inte...

CVE-2022-34215

Technical details about CVE-2022-34215 are not publicly provided in the connected documents. Monitor for updates as more specifics (affected products, versions, and fixes) may be published by vendors.

CVE-2024-39383

CVE-2024-39383 affects Adobe Acrobat/Reader only in specific versions (e.g., Reader 20.005.30636, 24.002.20965/20964, 24.001.30123 and earlier). The issue is a Use-After-Free vulnerability that could allow arbitrary code execution in the current user context. Exploitation requires the user to ope...

CVE-2019-8051

CVE-2019-8051 is a use-after-free vulnerability in Adobe Acrobat and Reader affecting multiple versions (including 2019.012.20035 and earlier, 2017.011.30142/30143, and 2015.006.30497/30498). The issue allows arbitrary code execution upon successful exploitation, stemming from memory mismanagemen...

CVE-2019-8097

CVE-2019-8097 affects Adobe Acrobat and Reader (various older builds listed in the description) and corresponds to an internal IP disclosure vulnerability. Successful exploitation could lead to information disclosure. The provided sources (NVD/Nessus-APSB19-41 entries) describe multiple CVEs unde...

CVE-2019-8168

CVE-2019-8168 describes an out-of-bounds read vulnerability in Adobe Acrobat and Reader. Affected products include Adobe Acrobat/Reader versions 2019.012.20040 and earlier, 2017.011.30148 and earlier, and 2015.006.30503 and earlier, across Windows/macOS. Successful exploitation could lead to info...

CVE-2021-39859

CVE-2021-39859 affects Adobe Acrobat/Reader DC: Acrobat Reader DC versions 2021.005.20060 and earlier, 2020.004.30006 and earlier, and 2017.011.30199 and earlier are vulnerable to a Use-After-Free that can disclose sensitive memory and bypass ASLR. Exploitation requires user interaction (victim m...

CVE-2022-28265

Adobe Acrobat Reader DC and related Acrobat components are affected by an out-of-bounds read when parsing crafted PDF files, potentially allowing memory reads past bounds and bypassing ASLR. Affected versions include Acrobat Reader DC 22.001.2011x and earlier, 20.005.3033x and earlier, and 17.012...

CVE-2023-44338

Adobe Acrobat Reader versions 23.006.20360 (and earlier) and 20.005.30524 (and earlier) are affected by an out-of-bounds read when parsing a crafted file, potentially allowing code execution in the caller’s context. Exploitation requires user interaction (victim must open a malicious file). The c...

CVE-2022-28232

CVE-2022-28232 affects Adobe Acrobat Reader DC and related Acrobat/Reader components. A use-after-free vulnerability in the processing of the collab object can allow arbitrary code execution in the context of the current user. Exploitation requires user interaction: a victim must open a malicious...

CVE-2023-44365

CVE-2023-44365 affects Adobe Acrobat Reader (versions 23.006.20360 and earlier, and 20.005.30524 and earlier). The issue is an Access of Uninitialized Pointer leading to possible arbitrary code execution under the current user . Exploitation requires user interaction (victim must open a malicious...

CVE-2019-8104

CVE-2019-8104 affects Adobe Acrobat and Reader versions up to 2019.012.20035 and older (including 2017.x and 2015.x branches). It is described as an out-of-bounds read vulnerability that could lead to information disclosure if exploited. The connected documents corroborate a broader APSB19-41 set...

CVE-2019-8175

CVE-2019-8175 affects Adobe Acrobat and Reader across multiple versions (2019.012.20040 and earlier; 2017.011.30148 and earlier; 2015.006.30503 and earlier). The underlying issue is a use-after-free vulnerability that could allow arbitrary code execution on successful exploitation. The issue is d...

CVE-2022-28239

CVE-2022-28239 affects Adobe Acrobat/Reader products. An out-of-bounds read occurs while parsing a crafted PDF/file, allowing code execution in the context of the current user. Impacts target Acrobat Reader DC (versions 22.001.2011x and earlier; 20.005.3033x and earlier; 17.012.3022x and earlier)...

CVE-2022-28262

CVE-2022-28262 affects Adobe Acrobat Reader DC (and related Acrobat/Reader builds) where parsing a crafted file can trigger an out-of-bounds read, potentially allowing bypass of mitigations such as ASLR. Affected versions include Acrobat Reader DC 22.001.2011x and earlier, 20.005.3033x and earlie...

CVE-2021-21038

Technical details for CVE-2021-21038 are not publicly disclosed in the provided Connected documents. No concrete affected products, root cause, impact, or fixes are included here. Monitor for official updates from vendors or CERT advisories.

CVE-2022-27797

CVE-2022-27797 affects Acrobat Reader DC and related Adobe products. A use-after-free in the processing of annotations can allow arbitrary code execution in the context of the current user. Affected versions include Acrobat Reader DC 22.001.20085 and earlier, 20.005.3031x and earlier, and 17.012....

CVE-2017-11263

Adobe Acrobat Reader 2017 (and earlier) is affected by a memory corruption vulnerability in internal data structure manipulation related to document encoding, which could allow arbitrary code execution on successful exploitation. The CVE entry lists affected products/versions such as Acrobat Read...

CVE-2019-8201

CVE-2019-8201 is an out-of-bounds read vulnerability in Adobe Acrobat and Reader. Multiple connected sources confirm the issue affects Adobe Acrobat/Reader versions up to various old builds (e.g., 2019.012.20040, 2017.011.30148, 2015.006.30503 and older) and could allow an attacker to disclose in...

CVE-2019-8208

Adobe Acrobat and Reader are affected by a use-after-free vulnerability in multiple legacy builds (e.g., 2019.012.20040 and earlier; 2017.011.30148 and earlier; 2015.006.30503 and earlier). The issue could allow remote code execution on affected systems when exploited, as described in APSB19-49. ...

CVE-2022-28240

CVE-2022-28240 affects Adobe Acrobat Reader DC and Acrobat/Reader versions listed in the NVD entry, due to a use-after-free flaw that could allow arbitrary code execution in the context of the current user. Exploitation requires the user to open a malicious file. The advisory suggests updating to...

CVE-2022-34234

CVE-2022-34234 affects Adobe Acrobat Reader DC/Classic versions prior to the listed fixed releases (e.g., 22.001.20142 and earlier 20.005.30334 and 17.012.30229 families) with a Use-After-Free vulnerability that can lead to disclosure of memory and bypass mitigation like ASLR. Root cause: use-aft...

CVE-2023-44340

Adobe Acrobat Reader suffers an out-of-bounds read (CVE-2023-44340) that could disclose memory and bypass ASLR. Affected: versions 23.006.20360 and earlier, 20.005.30524 and earlier. Exploitation requires user interaction (opening a malicious file). Root cause: out-of-bounds read; impact: confide...

CVE-2023-44360

CVE-2023-44360 affects Adobe Acrobat Reader, versions 23.006.20360 and earlier (and 20.005.30524 and earlier). The issue is an out-of-bounds read that can disclose sensitive memory and could bypass ASLR. Exploitation requires user interaction (victim opening a malicious file). Adobe’s advisory AP...

CVE-2024-20731

CVE-2024-20731 affects Adobe Acrobat Reader (DC/Continuous) versions 20.005.30539, 23.008.20470 and earlier. It is described as a Use-After-Free in PDAnnot destroy that can lead to arbitrary code execution in the context of the current user, requiring user interaction (victim opens a malicious fi...

CVE-2019-8211

CVE-2019-8211 is a use-after-free vulnerability in Adobe Acrobat/Reader. Affected products include Adobe Acrobat/Reader with versions 2019.012.20040 and earlier, 2017.011.30148 and earlier, and 2015.006.30503 and earlier. The root cause is a use-after-free condition that could allow arbitrary cod...

CVE-2021-39863

CVE-2021-39863 affects Adobe Acrobat Reader DC variants including 2021.005.20060 (and earlier), 2020.004.30006 (and earlier), and 2017.011.30199 (and earlier). The issue is a heap/buffer overflow triggered while parsing a specially crafted PDF, leading to arbitrary code execution in the context o...

CVE-2022-27799

CVE-2022-27799 is an Acrobat Reader DC use-after-free vulnerability in the acroform event processing that could allow arbitrary code execution in the context of the current user. Affected versions include Acrobat Reader DC 22.001.20085 and earlier, 20.005.3031x and earlier, and 17.012.30205 and e...

CVE-2022-28230

CVE-2022-28230 affects Adobe Acrobat Reader DC and related Acrobat/Reader builds. It is a use-after-free in the acroform event processing that can lead to arbitrary code execution in the context of the current user. Exploitation requires user interaction (open a malicious file). Affected versions...

CVE-2023-21604

Adobe Acrobat/Reader is affected by a stack-based buffer overflow (CVE-2023-21604) in versions 22.003.20282 and earlier, 22.003.20281 and earlier, and 20.005.30418 and earlier. The issue can lead to arbitrary code execution in the context of the current user and requires the victim to open a mali...

CVE-2023-26418

Technical details for CVE-2023-26418 are not publicly available in the provided documents; monitor for updates.

CVE-2021-21044

CVE-2021-21044 affects Acrobat Reader DC: versions 2020.013.20074 and earlier, 2020.001.30018 and earlier, and 2017.011.30188 and earlier. It is an out-of-bounds write when parsing a crafted JPEG file, allowing an unauthenticated attacker to achieve arbitrary code execution in the context of the ...

CVE-2023-44339

CVE-2023-44339 affects Adobe Acrobat Reader/Classic: an out-of-bounds read could disclose memory and bypass ASLR. Affected versions include 23.006.20360 and earlier, and 20.005.30524 and earlier. Exploitation requires user interaction (opening a malicious file). Connected documents do not provide...

CVE-2023-44361

CVE-2023-44361 affects Adobe Acrobat Reader versions 23.006.20360 and earlier, and 20.005.30524 and earlier. It is a Use-After-Free vulnerability that can disclose sensitive memory and bypass mitigations such as ASLR. Exploitation requires user interaction (the victim must open a malicious file)....

CVE-2023-44367

Technical details for CVE-2023-44367 are not publicly provided in the connected documents. The initial description lists affected products and impact but does not include root cause, affected versions beyond those stated, or remediation specifics. Monitor for updates.

CVE-2019-8099

CVE-2019-8099 affects Adobe Acrobat and Adobe Reader prior to certain versions, due to an integer overflow in the product. Affected versions include 2019.012.20035 and earlier, 2017.011.30142/30143 and earlier, and 2015.006.30497/30498 and earlier. The vulnerability potentially allows information...

CVE-2019-8203

Adobe Acrobat and Reader are affected by CVE-2019-8203, a use-after-free vulnerability in multiple older builds (e.g., 2019.012.20040 and earlier; 2017.011.30148 and earlier; 2015.006.30503 and earlier). Successful exploitation could lead to arbitrary code execution. The flaw is reported across W...