CVE-2023-44367

Technical details for CVE-2023-44367 are not publicly provided in the connected documents. The initial description lists affected products and impact but does not include root cause, affected versions beyond those stated, or remediation specifics. Monitor for updates.

CVE-2022-28241

CVE-2022-28241 affects Adobe Acrobat Reader DC and related Acrobat/Reader builds (e.g., 22.001.2011x and earlier, 20.005.3033x and earlier, 17.012.3022x and earlier). The issue is an out-of-bounds read during parsing of a crafted PDF/file, which can result in a read past the end of an allocated m...

CVE-2023-22241

CVE-2023-22241 affects Adobe Acrobat Reader DC and related builds. It is an out-of-bounds write vulnerability that could lead to arbitrary code execution in the context of the current user. Exploitation requires the user to open a malicious file. Affected versions include 22.003.20282 (and earlie...

CVE-2023-44339

CVE-2023-44339 affects Adobe Acrobat Reader/Classic: an out-of-bounds read could disclose memory and bypass ASLR. Affected versions include 23.006.20360 and earlier, and 20.005.30524 and earlier. Exploitation requires user interaction (opening a malicious file). Connected documents do not provide...

CVE-2019-8059

Adobe Acrobat/Reader (Windows, macOS) is affected by CVE-2019-8059: multiple versions including 2019.012.20035 and earlier, 2017.011.30142/43, and 2015.006.30497/98 suffer a use-after-free vulnerability that could allow arbitrary code execution on successful exploitation. The issue is documented ...

CVE-2019-8203

Adobe Acrobat and Reader are affected by CVE-2019-8203, a use-after-free vulnerability in multiple older builds (e.g., 2019.012.20040 and earlier; 2017.011.30148 and earlier; 2015.006.30503 and earlier). Successful exploitation could lead to arbitrary code execution. The flaw is reported across W...

CVE-2019-8215

Adobe Acrobat/Reader is affected by CVE-2019-8215 (use-after-free) across multiple older builds (2019.012.20040 and earlier, 2017.011.30148 and earlier, 2015.006.30503 and earlier). The vendor states successful exploitation could lead to arbitrary code execution. The connected advisories (APSB19-...

CVE-2021-45068

CVE-2021-45068 affects Adobe Acrobat Reader DC and related products with an out-of-bounds write in font parsing that can lead to arbitrary code execution in the context of the current user. Exploitation requires user interaction (victim opens a malicious file). Affected versions include Acrobat R...

CVE-2022-28234

Technical details about CVE-2022-28234 are not publicly available in the provided connected documents; please monitor for updated advisories or patch information.

CVE-2022-28263

CVE-2022-28263 affects Adobe Acrobat/Reader components on Windows and related platforms: out-of-bounds read when parsing a crafted file, potentially bypassing ASLR. Successful exploitation requires user interaction (opening a malicious file). Affected product families include Acrobat Reader DC/Co...

CVE-2022-34222

CVE-2022-34222 affects Adobe Acrobat Reader DC/Continuous and certain older versions (22.001.20142 and earlier; 20.005.30334 and earlier; 17.012.30229 and earlier). The issue is an out-of-bounds read when parsing a crafted file, potentially allowing code execution in the user’s context. Exploitat...

CVE-2022-44520

CVE-2022-44520 affects Adobe Acrobat/Reader: Acrobat Reader DC versions 22.001.20085 and earlier, 20.005.3031x and earlier, and 17.012.30205 and earlier. It is a use‑after‑free vulnerability that could allow arbitrary code execution in the context of the current user. Exploitation requires user i...

CVE-2023-44348

Adobe Acrobat Reader DC/Classic is affected by an out-of-bounds read in versions 23.006.20360 and earlier (Reader) and 20.005.30524 and earlier (Classic). The flaw could disclose sensitive memory and bypass ASLR; exploitation requires user interaction (opening a malicious file). Adobe issued APSB...

CVE-2019-8043

CVE-2019-8043 describes an out-of-bounds read vulnerability in Adobe Acrobat and Adobe Reader. Affected products include Adobe Acrobat/Reader versions up to 2019.012.20035 and earlier, 2017.011.30142/30143 and earlier, and 2015.006.30497/30498 and earlier, with successful exploitation potentially...

CVE-2019-8218

Adobe Acrobat/Reader (multiple branches and versions listed: 2019.012.20040 and earlier, 2017.011.30148 and earlier, 2015.006.30503 and earlier) contains an out-of-bounds read vulnerability that could lead to information disclosure. Root cause is an out-of-bounds read in the viewer, with network ...

CVE-2021-21028

Adobe Acrobat/Reader DC is affected by CVE-2021-21028 (Use-After-Free in PDF handling) across multiple old build lines (e.g., 2017.011.30188, 2020.001.30018, 2020.013.20074) with arbitrary code execution in the current user context. Exploitation requires user interaction (victim opens a malicious...

CVE-2021-44709

CVE-2021-44709 affects Adobe Acrobat/Reader DC versions 21.007.20099 and earlier, 20.004.30017 and earlier, and 17.011.30204 and earlier. The issue is a heap overflow caused by insecure handling of a crafted file, potentially enabling arbitrary code execution in the current user’s context. Exploi...

CVE-2022-34228

Adobe Acrobat Reader and related components are affected by CVE-2022-34228, an Access of Uninitialized Pointer vulnerability in multiple versions (e.g., 22.001.20142 and earlier; 20.005.30334 and earlier; 17.012.30229 and earlier). The issue can lead to arbitrary code execution in the context of ...

CVE-2023-44358

CVE-2023-44358 affects Adobe Acrobat Reader up to versions 23.006.20360 and 20.005.30524 and earlier. It is an out-of-bounds read vulnerability that can disclose memory and potentially bypass ASLR. Exploitation requires the user to open a malicious file, making it a user-interaction–dependent iss...

CVE-2024-45112

CVE-2024-45112 affects Adobe Acrobat Reader DC/Classic (e.g., versions 24.002.21005, 24.001.30159, 20.005.30655, 24.003.20054 and earlier). The issue is a Type Confusion vulnerability: an object is accessed with an incompatible type, causing a logic error that can lead to arbitrary code execution...

CVE-2021-21045

CVE-2021-21045 affects Adobe Acrobat Reader DC; it is an improper access‑control vulnerability that could let an unauthenticated attacker elevate privileges in the current user context. Affected versions (per provided data): 2020.013.20074 and earlier, 2020.001.30018 and earlier, and 2017.011.301...

CVE-2022-28246

Technical details about CVE-2022-28246 are not publicly available in the provided connected documents. Monitor for updates; current sources do not expand on affected products, root cause, or remediation beyond the basic description.

CVE-2022-28259

Technical details for CVE-2022-28259 are not publicly available in the provided documents. Monitor for updates.

CVE-2022-28267

CVE-2022-28267 affects Adobe Acrobat Reader DC and related products when parsing a crafted file, causing an out-of-bounds read that can bypass ASLR. Affected versions include Acrobat Reader DC 22.001.2011x and earlier, 20.005.3033x and earlier, and 17.012.3022x and earlier. The issue requires use...

CVE-2022-38437

CVE-2022-38437 affects Adobe Acrobat Reader versions 22.002.20212 and earlier, and 20.005.30381 and earlier. The issue is a Use After Free vulnerability that could disclose memory contents and bypass mitigations such as ASLR. Exploitation requires user interaction (the victim must open a maliciou...

CVE-2023-44357

CVE-2023-44357 affects Adobe Acrobat Reader versions 23.006.20360 (and earlier) and 20.005.30524 (and earlier). It is an out-of-bounds read vulnerability that can lead to disclosure of sensitive memory and may bypass mitigations such as ASLR. Exploitation requires user interaction: a victim must ...

CVE-2020-9715

CVE-2020-9715 is an Adobe Acrobat/Reader use-after-free vulnerability in the EScript engine (ESObject cache) that can lead to arbitrary code execution. The PoC shows a UAF pattern triggered via PDF JavaScript, with ANSI/Unicode key handling causing stale cache entries after GC. Affected:** Acroba...

CVE-2021-21088

Adobe Acrobat Reader DC is affected by a Use-After-Free vulnerability (CVE-2021-21088) that could allow arbitrary code execution in the current user’s context. Affected versions include 2020.013.20074 and earlier, 2020.001.30018 and earlier, and 2017.011.30188 and earlier. Exploitation requires u...

CVE-2022-27787

CVE-2022-27787 affects Acrobat Reader DC and related Acrobat products, caused by an out-of-bounds write in font parsing that could lead to arbitrary code execution under the current user. Affected: Acrobat Reader DC 22.001.20085 and earlier, 20.005.3031x and earlier, 17.012.30205 and earlier. Exp...

CVE-2022-27802

CVE-2022-27802 affects Adobe Acrobat Reader DC and related products (versions 22.001.20085 and earlier; 20.005.3031x and earlier; 17.012.30205 and earlier) with a use-after-free vulnerability in annotation processing that could allow arbitrary code execution in the user’s context. Exploitation re...

CVE-2022-28244

CVE-2022-28244 (Adobe Acrobat/Reader DC CSP Bypass) affects Acrobat Reader DC with versions up to 22.001.20085, 20.005.3031x, and 17.012.30205 (and earlier). The issue is a violation of secure design principles: bypassing the Content Security Policy, which could let an attacker trigger arbitraril...

CVE-2022-28255

CVE-2022-28255 affects Acrobat Reader DC: versions 22.001.2011x and earlier, 20.005.3033x and earlier, and 17.012.3022x and earlier. Root cause is an out-of-bounds read when parsing a crafted file, potentially bypassing ASLR. Exploitation requires user interaction (victim opens a malicious file)....

CVE-2022-28256

Technical details of CVE-2022-28256 are not publicly provided in the supplied documents. Monitor for updates from vendors and security advisories.

CVE-2017-3036

CVE-2017-3036 affects Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, and 15.023.20070 and earlier, with an exploitable memory corruption vulnerability in the PCX image format processing. The issue is triggered during image conversion and could lead to arbitrary code ...

CVE-2022-28251

CVE-2022-28251 affects Acrobat Reader DC (versions 22.001.2011x and earlier, 20.005.3033x and earlier, 17.012.3022x and earlier). The issue is an out-of-bounds read when parsing a crafted file, which can lead to reading beyond allocated memory and potentially bypass ASLR. Exploitation requires us...

CVE-2023-44337

Adobe Acrobat Reader (versions 23.006.20360 and earlier; 20.005.30524 and earlier) is affected by an out-of-bounds read when parsing a crafted file, potentially allowing code execution in the user's context. Exploitation requires user interaction (opening a malicious file). The issue is tracked a...

CVE-2017-3122

CVE-2017-3122 affects Adobe Acrobat Reader (2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier). The issue is a memory corruption in the image conversion engine when processing Enhanced Metafile Format (EMF) data related to Bezier curves, w...

CVE-2022-28231

CVE-2022-28231 affects Adobe Acrobat Reader DC and related Acrobat/Reader versions: an out-of-bounds read during doc object processing could allow code execution in the user’s context. A victim must open a crafted file for exploitation, requiring user interaction. Affected versions include Acroba...

CVE-2022-28233

Adobe Acrobat Reader DC affected by a use-after-free in processing annotations, enabling arbitrary code execution in the current user context. Affected products include Acrobat Reader DC versions 22.001.20085 and earlier, 20.005.3031x and earlier, and 17.012.30205 and earlier; exploitation requir...

CVE-2024-20735

CVE-2024-20735 affects Adobe Acrobat Reader/DC clients (e.g., Acrobat Reader versions 20.005.30539, 23.008.20470 and earlier) via an out-of-bounds read that can disclose memory contents and bypass ASLR. Exploitation requires user interaction (victim opens a malicious file); impact is confidential...

CVE-2019-7033

CVE-2019-7033 affects Adobe Acrobat and Reader versions 2019.010.20069 and earlier, 2017.011.30113 and earlier, and 2015.006.30464 and earlier. The vulnerability is an out-of-bounds read that could lead to information disclosure. Public sources in connected documents corroborate the affected prod...

CVE-2019-8238

CVE-2019-8238 is a path traversal vulnerability in Adobe Acrobat and Reader that could lead to information disclosure in the context of the current user. Affected products include Adobe Acrobat/Reader versions 2019.010.20100 and earlier; 2019.010.20099 and earlier; 2017.011.30140 and earlier; 201...

CVE-2022-24091

Adobe Acrobat Reader DC CVE-2022-24091 is an out-of-bounds write vulnerability in the font parsing path that could allow arbitrary code execution in the context of the current user. Affected versions include 21.007.20099 and earlier, 20.004.30017 and earlier, and 17.011.30204 and earlier; exploit...

CVE-2022-27796

CVE-2022-27796 affects Adobe Acrobat/Reader DC (versions 22.001.20085 and earlier; 20.005.3031x and earlier; 17.012.30205 and earlier) and is caused by a use-after-free in processing of the acroform event, enabling arbitrary code execution in the user’s context. Exploitation requires user interac...

CVE-2022-28252

Adobe Acrobat Reader DC is affected by an out-of-bounds read vulnerability when parsing a crafted file in versions 22.001.2011x and earlier, 20.005.3033x and earlier, and 17.012.3022x and earlier. Exploitation could bypass ASLR and requires user interaction (victim must open a malicious file). Re...

CVE-2022-28254

CVE-2022-28254 (Adobe Acrobat/Reader DC) is an out-of-bounds read vulnerability in the PDF parsing path that can bypass ASLR. Affected products include Acrobat Reader DC 22.001.2011x and earlier, 20.005.3033x and earlier, and 17.012.3022x and earlier. Exploitation requires the user to open a mali...

CVE-2022-34236

CVE-2022-34236 is an information-disclosure vulnerability in Adobe Acrobat Reader DC/Continuous, caused by a font-parsing out-of-bounds read that could leak memory. Affected are various versions (Reader/DC continuous and prior releases) with exploitation requiring user interaction to open a malic...

CVE-2022-44514

CVE-2022-44514 : Acrobat Reader DC (versions 22.001.20085 and earlier; 20.005.3031x and earlier; 17.012.30205 and earlier) is affected by a use‑after‑free vulnerability that can cause arbitrary code execution in the current user context. Exploitation requires the user to open a malicious file, en...

CVE-2023-44356

Adobe Acrobat Reader versions 23.006.20360 and earlier (and 20.005.30524 and earlier) are affected by an out-of-bounds read that could disclose sensitive memory and bypass ASLR. Exploitation requires user interaction (victim opens a malicious file). No remediation details are provided in the supp...

CVE-2019-7030

Adobe Acrobat/Reader contains an integer overflow in multiple builds (examples cited: 2019.010.20069 and earlier; 2017.011.30113 and earlier; 2015.006.30464 and earlier). Exploitation could lead to information disclosure. The CVE-2019-7030 entry is referenced within APSB19-07 related advisories a...