1832 matches found
CVE-2022-28268
Acrobat Reader DC and related Adobe Acrobat/Reader versions (DC: 22.001.20085 and earlier; 20.005.3031x and earlier; 17.012.30205 and earlier) are affected by an out-of-bounds read vulnerability that can disclose memory and bypass ASLR. Exploitation requires user interaction (victim opens a craft...
CVE-2022-34233
Summary: CVE-2022-34233 is a Use-After-Free flaw in Adobe Acrobat Reader versions up to 22.001.20142 (and earlier), 20.005.30334 (and earlier), and 17.012.30229 (and earlier). The issue can disclose memory and bypass ASLR, with exploitation requiring user interaction (open a malicious file). Conn...
CVE-2022-34236
CVE-2022-34236 is an information-disclosure vulnerability in Adobe Acrobat Reader DC/Continuous, caused by a font-parsing out-of-bounds read that could leak memory. Affected are various versions (Reader/DC continuous and prior releases) with exploitation requiring user interaction to open a malic...
CVE-2019-16444
CVE-2019-16444 affects Adobe Acrobat and Reader versions up to the listed 2019.021.20056 (Windows) and older builds (2017/2015 lines) and is described in the initial entry as a binary planting vulnerability in the default folder that could lead to privilege escalation on successful exploit. Conne...
CVE-2019-7030
Adobe Acrobat/Reader contains an integer overflow in multiple builds (examples cited: 2019.010.20069 and earlier; 2017.011.30113 and earlier; 2015.006.30464 and earlier). Exploitation could lead to information disclosure. The CVE-2019-7030 entry is referenced within APSB19-07 related advisories a...
CVE-2022-28264
CVE-2022-28264 affects Adobe Acrobat/Reader on multiple lines of versions: Acrobat Reader DC 22.001.2011x (and earlier), 20.005.3033x (and earlier) and 17.012.3022x (and earlier). The issue is an out-of-bounds read when parsing a crafted file, which can cause a read past the end of an allocated m...
CVE-2022-34217
CVE-2022-34217 affects Adobe Acrobat/Reader. Root cause: Out-Of-Bounds Write in font parsing, enabling arbitrary code execution in the context of the current user. Exploitation requires user interaction (victim opens a malicious file). Affected versions include Acrobat Reader 22.001.20142 and ear...
CVE-2023-38240
CVE-2023-38240 affects Adobe Acrobat Reader versions 23.003.20244 and earlier, and 20.005.30467 and earlier, via an out-of-bounds read that can disclose memory and bypass ASLR. Exploitation requires user interaction (opening a crafted file). The provided documents corroborate the vulnerability wi...
CVE-2024-34094
Technical details about CVE-2024-34094 are not publicly available in the provided connected documents. Monitor for updates. If needed, refer to the initial description for the high-level impact (Use After Free causing arbitrary code execution with user interaction).
CVE-2019-8058
CVE-2019-8058 is a use-after-free vulnerability in Adobe Acrobat/Reader. The Red Hat and NVD entries confirm the issue affects multiple old builds (including 2019.012.20035 and earlier, 2017.011.30142/43, 2015.006.30497/98) and could allow arbitrary code execution if exploited. The connected docu...
CVE-2019-8170
CVE-2019-8170 is a heap overflow vulnerability affecting Adobe Acrobat and Reader versions including 2019.012.20040 and earlier, 2017.011.30148 and earlier, and 2015.006.30503 and earlier. The underlying issue is a heap overflow that could allow remote code execution if exploited. The vulnerabili...
CVE-2021-35982
CVE-2021-35982 affects Adobe Acrobat Reader DC and related products, with an Uncontrolled Search Path Element leading to DLL hijacking and arbitrary code execution in the current user context. Root cause: vulnerable DLL search path handling enables a local attacker with non-administrative privile...
CVE-2021-39836
CVE-2021-39836 affects Adobe Acrobat-related products: Acrobat Reader DC versions 2021.005.20060 and earlier, 2020.004.30006 and earlier, and 2017.011.30199 and earlier, with a use-after-free in the AcroForm buttonGetIcon handling that could lead to arbitrary code execution in the context of the ...
CVE-2021-44741
Adobe Acrobat Reader DC is affected by CVE-2021-44741: a NULL pointer dereference when parsing a specially crafted file. This allows an unauthenticated attacker to cause an application denial-of-service in the context of the current user, with exploitation requiring user interaction (victim must ...
CVE-2022-28258
CVE-2022-28258 affects Adobe Acrobat/Reader: an out-of-bounds read during parsing of crafted files can read past allocated memory, potentially bypassing ASLR. Affected are Acrobat Reader DC 22.001.2011x and earlier, Acrobat Reader/Classic 20.x 20.005.3033x and earlier, and Acrobat/Reader 17.x 17....
CVE-2022-35691
Adobe Acrobat Reader/DC Classic and related products (e.g., Acrobat Reader DC Continuous) are affected by CVE-2022-35691, a NULL Pointer Dereference that could allow a denial-of-service under the context of the current user. The issue is triggered when a user opens a malicious file, requiring use...
CVE-2016-0935
CVE-2016-0935 is a double-free vulnerability in Adobe Reader and Acrobat allowing remote code execution via a crafted ExtGState dictionary. Affected products include Adobe Reader and Acrobat before 11.0.14, Acrobat/Reader DC Classic before 15.006.30119, and Acrobat/Reader DC Continuous before 15....
CVE-2019-7031
CVE-2019-7031 is a use-after-free vulnerability in Adobe Acrobat and Adobe Reader. Affected versions include 2019.010.20069 and earlier, 2017.011.30113 and earlier, and 2015.006.30464 and earlier. Successful exploitation could lead to arbitrary code execution. Red Hat and Nessus entries confirm t...
CVE-2021-21021
CVE-2021-21021 affects Adobe Acrobat Reader DC. It is a Use-After-Free vulnerability in PDF handling that could enable arbitrary code execution in the context of the current user. Exploitation requires user interaction (victim opens a malicious file). Affected versions include 2020.013.20074 and ...
CVE-2021-40723
CVE-2021-40723 affects Adobe Acrobat Reader DC: out-of-bounds read could disclose memory and bypass mitigations like ASLR. A victim must open a malicious file to exploit. Affected versions include 2020.013.20074 and earlier, 2020.001.30018 and earlier, and 2017.011.30188 and earlier. No remediati...
CVE-2021-45067
Summary: CVE-2021-45067 affects Adobe Acrobat Reader DC and older builds (21.007.20099 and earlier; 20.004.30017 and earlier; 17.011.30204 and earlier) with an Access of Memory Location After End of Buffer that could disclose memory contents and potentially bypass ASLR. Exploitation requires user...
CVE-2022-28249
CVE-2022-28249 affects Acrobat Reader DC and related Adobe products (versions listed) with an out-of-bounds read during parsing of a crafted PDF/file, allowing a read past the end of a memory structure and potentially bypassing ASLR. Exploitation requires user interaction (victim must open a mali...
CVE-2022-28253
CVE-2022-28253 is an Adobe Acrobat/Reader DC out-of-bounds read vulnerability affecting multiple older builds of Acrobat Reader DC and Acrobat/Reader Classic lines (e.g., 22.001.2011x, 20.005.3033x, 17.012.3022x and earlier) when parsing a crafted file. The issue can allow reading past the end of...
CVE-2022-28257
CVE-2022-28257 affects Adobe Acrobat/Reader products (e.g., Acrobat Reader DC and related classic/continuous lines) with an out-of-bounds read when parsing a crafted file, potentially bypassing ASLR. Affected versions include Acrobat Reader DC 22.001.2011x and earlier, 20.005.3033x and earlier, a...
CVE-2024-20730
Public description states an Integer Overflow/Wraparound in Adobe Acrobat Reader (versions 20.005.30539, 23.008.20470 and earlier) could lead to arbitrary code execution with user interaction. No additional technical details are provided in the connected documents.
CVE-2017-11232
CVE-2017-11232 affects Adobe Acrobat Reader versions 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier. The vulnerability is a use-after-free in EMF data handling related to brush manipulation, which could lead to arbitrary code execution ...
CVE-2020-3805
CVE-2020-3805 is a use-after-free vulnerability affecting Adobe Acrobat and Reader across multiple versions (including 2020.006.20034 and earlier, 2017.011.30158 and earlier, 2015.006.30510 and earlier). The Red Hat and OpenVAS/Nessus entries confirm the underlying issue and list the affected bui...
CVE-2022-28261
Vulnerability summary: Acrobat Reader DC and related Adobe products suffer an out-of-bounds read when parsing a crafted file, potentially allowing bypass of mitigations such as ASLR. Affected software (examples from sources): Acrobat Reader DC 22.001.2011x and earlier; 20.005.3033x and earlier; 1...
CVE-2022-34227
Adobe Acrobat Reader DC/Acrobat Reader versions 22.001.20142 (and earlier), 20.005.30334 (and earlier) and 17.012.30229 (and earlier) are affected by CVE-2022-34227, a Use-After-Free vulnerability that could allow arbitrary code execution in the context of the current user. Exploitation requires ...
CVE-2017-11216
Technical details for CVE-2017-11216 are not publicly available in the provided documents. Monitor for updates; the sources reference multiple Acrobat vulnerabilities but do not specify this CVE’s affected product/version, root cause, or fix.
CVE-2021-44701
CVE-2021-44701 affects Acrobat Reader DC and related Windows/macOS builds (versions 21.007.20099 and earlier, 20.004.30017 and earlier, 17.011.30204 and earlier) via a use-after-free in the processing of Format event actions, enabling arbitrary code execution in the user context. Exploitation req...
CVE-2022-27791
Adobe Acrobat Reader DC CVE-2022-27791 is a stack-based buffer overflow in font processing that can lead to arbitrary code execution under the current user. Affected versions include 22.001.20085 and earlier; 20.005.3031x and earlier; 17.012.30205 and earlier. Exploitation requires user interacti...
CVE-2022-28248
CVE-2022-28248 affects Adobe Acrobat Reader DC and related Acrobat/Reader versions (22.001.2011x and earlier; 20.005.3033x and earlier; 17.012.3022x and earlier) via an out-of-bounds read when parsing crafted files. The root cause is a boundary/ memory structure handling flaw that could allow rea...
CVE-2022-34225
CVE-2022-34225 affects Adobe Acrobat Reader DC/Continuous and Acrobat Reader variants; it is a Use-After-Free in AcroForm exportValues leading to arbitrary code execution under the current user, with exploitation requiring the user to open a malicious file. Vendor advisories indicate updates (APS...
CVE-2022-34226
CVE-2022-34226 affects Adobe Acrobat Reader DC/Acrobat Reader with versions listed as affected (22.001.20142 and earlier for Reader, plus 20.005.30334 and 17.012.30229 and earlier). The issue is an out-of-bounds read when parsing a crafted file, which can allow code execution in the context of th...
CVE-2022-38450
CVE-2022-38450 affects Adobe Acrobat Reader DC and Acrobat Reader DC Continuous (Windows/Mac), involving a stack-based buffer overflow in XFA parsing that can lead to arbitrary code execution in the context of the current user. Exploitation requires the user to open a malicious file, with the iss...
CVE-2023-21614
CVE-2023-21614 affects Adobe Acrobat Reader DC/Adobe Acrobat where fonts parsing causes an out-of-bounds read, exposing sensitive memory. Affected versions include 22.003.20282 and earlier, 22.003.20281 and earlier, and 20.005.30418 and earlier. Root cause: out-of-bounds read leading to informati...
CVE-2017-3113
CVE-2017-3113 is an exploitable use-after-free in the JavaScript engine of Adobe Acrobat/Reader (and related Acrobat products) affecting 2017-era builds and earlier. The initial description specifies arbitrary code execution if successfully exploited by creating large strings. Connected OpenVAS e...
CVE-2019-8017
Adobe Acrobat/Reader (Windows/macOS) versions listed for CVE-2019-8017 are affected by an untrusted pointer dereference vulnerability that could lead to arbitrary code execution. Affected: 2019.012.20035 and earlier, 2017.011.30142/30143, 2015.006.30497/30498. Root cause: untrusted pointer derefe...
CVE-2019-8046
CVE-2019-8046: A heap overflow in Adobe Acrobat/Reader affects versions 2019.012.20035 and earlier, 2017.011.30142/43 and earlier, 2015.006.30497/98 and earlier. Successful exploitation could lead to arbitrary code execution. Public advisories (APSB19-41) are referenced; no exploitation details a...
CVE-2021-28551
CVE-2021-28551 affects Adobe Acrobat Reader DC family: versions 2021.001.20155 and earlier, 2020.001.30025 and earlier, and 2017.011.30196 and earlier. The issue is an Out-of-bounds read leading to arbitrary code execution in the context of the current user. It is exploitable by an unauthenticate...
CVE-2022-27790
CVE-2022-27790 affects Adobe Acrobat Reader DC and related Acrobat/Reader builds. A use-after-free in font processing could allow arbitrary code execution in the context of the current user, requiring user interaction (victim opens a malicious file). Affected versions include Acrobat Reader DC 22...
CVE-2022-28235
CVE-2022-28235 affects Adobe Acrobat Reader DC and related Acrobat/Reader variants. It is a use-after-free vulnerability in the processing of the acroform event that could allow arbitrary code execution in the current user context. Exploitation requires user interaction (opening a malicious file)...
CVE-2022-28245
CVE-2022-28245 is an out-of-bounds read in Adobe Acrobat/Reader DC when parsing a crafted file, potentially bypassing ASLR. Affected: Acrobat Reader DC 22.001.2011x and earlier; Reader DC 20.005.3033x and earlier; Acrobat 17.012.3022x and earlier. Exploitation requires user interaction (victim op...
CVE-2022-34219
Adobe Acrobat Reader DC/Classic versions up to 22.001.20142 (and earlier) and 17.012.30229 (and earlier) are affected by a Use-After-Free vulnerability that could execute arbitrary code. The issue requires the user to open a malicious file, and is tied to font parsing/use-after-free in the reader...
CVE-2022-34232
Summary of CVE-2022-34232 (Adobe Acrobat/Reader Use-After-Free): Affects Adobe Acrobat Reader versions 22.001.20142 and earlier, 20.005.30334 and earlier, and 17.012.30229 and earlier. Root cause is a Use-After-Free condition in the PDF processing path that can lead to disclosure of sensitive mem...
CVE-2022-35678
CVE-2022-35678 affects Adobe Acrobat Reader DC/Classic products with an out-of-bounds read flaw that can disclose memory contents. The issue, triggered by opening a malicious file, could bypass ASLR and requires user interaction. Affected versions include Acrobat Reader 22.001.20169 and earlier, ...
CVE-2024-30284
CVE-2024-30284 affects Adobe Acrobat Reader DC/Classic: Use-After-Free in a component leads to arbitrary code execution under the user’s context. Impact is high (C:H/I:H/A:H) with CVSS 3.1 7.8. Exploitation requires user interaction (victim opens a malicious file). Affected versions include Acrob...
CVE-2015-5085
CVE-2015-5085 affects Adobe Reader and Acrobat on Windows/macOS: Adobe Reader/Acrobat 10.x before 10.1.15 and 11.x before 11.0.12, Acrobat DC Classic before 2015.006.30060, and Acrobat Reader DC Continuous before 2015.008.20082. The vulnerability bypasses JavaScript API execution restrictions via...