CVE-2022-34239

CVE-2022-34239 affects Adobe Acrobat Reader and related products; the issue is an out-of-bounds read in font parsing that could disclose memory. Versions affected include Acrobat Reader DC/Classic lines (e.g., 22.001.20142 and earlier; 20.005.30334 and earlier; 17.012.30229 and earlier), with exp...

CVE-2022-35678

CVE-2022-35678 affects Adobe Acrobat Reader DC/Classic products with an out-of-bounds read flaw that can disclose memory contents. The issue, triggered by opening a malicious file, could bypass ASLR and requires user interaction. Affected versions include Acrobat Reader 22.001.20169 and earlier, ...

CVE-2017-11211

CVE-2017-11211 details are not publicly provided in the connected documents. Monitor Adobe advisories and vendor bulletins for updates, fixes, affected versions, and remediation guidance.

CVE-2019-8023

CVE-2019-8023 affects Adobe Acrobat and Reader. The flaw is an out-of-bounds write in memory, enabling arbitrary code execution. Impact is high/critical per CVSS (network access, no user interaction). Affected products/versions include 2019.012.20035 and earlier, 2017.011.30142/43 and earlier, an...

CVE-2020-9722

Adobe Acrobat/Reader (Windows and macOS) versions 2020.009.20074 and earlier, 2020.001.30002, 2017.011.30171 and earlier, and 2015.006.30523 and earlier are affected by CVE-2020-9722, a use-after-free vulnerability. Exploitation could lead to arbitrary code execution. Remediation is available via...

CVE-2022-28247

CVE-2022-28247 affects Adobe Acrobat/Reader components: Acrobat Reader DC versions 22.001.2011x and earlier, 20.005.3033x and earlier, and 17.012.3022x and earlier, with an uncontrolled search path vulnerability that could cause local privilege escalation. Exploitation requires user interaction: ...

CVE-2022-35670

Adobe Acrobat Reader is affected by CVE-2022-35670 (Use After Free) which can disclose memory and bypass ASLR. Affected is multiple older releases; exploitation requires user interaction by opening a malicious file. Remediation: update to the latest Adobe Acrobat/Reader version per APSB22-39 to m...

CVE-2023-21610

CVE-2023-21610 affects Adobe Acrobat Reader versions 22.003.20282 and earlier, 20.005.30418 and earlier. It is a stack-based buffer overflow that could lead to arbitrary code execution in the context of the current user. Exploitation requires user interaction: the victim must open a malicious fil...

CVE-2017-11270

Technical details for CVE-2017-11270 are not publicly available in the provided connected documents. Monitor for updates and vendor advisories for affected Adobe Acrobat products.

CVE-2019-7029

Adobe Acrobat and Reader (Windows/macOS) affected versions: 2019.010.20069 and earlier, 2017.011.30113 and earlier, and 2015.006.30464 and earlier suffer a use-after-free vulnerability (CVE-2019-7029). The exploit could allow arbitrary code execution, as described in the CVE entries and Red Hat/N...

CVE-2019-8048

CVE-2019-8048 affects Adobe Acrobat and Reader, with a buffer overflow vulnerability reported in multiple older builds (versions 2019.012.20035 and earlier, 2017.011.30142/30143, 2015.006.30497/30498). Successful exploitation could lead to arbitrary code execution. Connected sources indicate pres...

CVE-2021-28554

CVE-2021-28554 affects Adobe Acrobat/Reader DC family. Adobe notes Out-of-bounds Read allowing arbitrary code execution in the context of the current user, requiring the victim to open a malicious file (user interaction). Affected are Acrobat Reader DC versions 2021.001.20155 and earlier, 2020.00...

CVE-2021-40731

CVE-2021-40731 affects Adobe Acrobat Reader DC; an out-of-bounds write occurs when parsing a crafted JPEG2000 file, potentially allowing arbitrary code execution in the context of the current user. Exploitation requires user interaction (victim must open a malicious file). Affected versions inclu...

CVE-2022-27789

Adobe Acrobat Reader DC is affected by CVE-2022-27789: a use-after-free in AcroForm processing could allow arbitrary code execution in the context of the current user. Exploitation requires user interaction (victim opens a malicious file). References indicate an Adobe APSB22-16 update addressing ...

CVE-2022-34220

CVE-2022-34220 affects Adobe Acrobat Reader DC/Continuous components and is a Use-After-Free vulnerability that could lead to arbitrary code execution in the current user context. According to the CVE entry, affected versions include Acrobat Reader: 22.001.20142 and earlier, 20.005.30334 and earl...

CVE-2016-0946

Technical details for CVE-2016-0946 are not publicly available in the provided documents. No concrete information on affected products, vectors, or fixes is present; monitor for updates.

CVE-2016-1093

CVE-2016-1093 affects Adobe Reader and Acrobat before 11.0.16, Acrobat and Acrobat Reader DC Classic before 15.006.30172, and Acrobat and Acrobat Reader DC Continuous before 15.016.20039 on Windows and macOS. The vulnerability allows attackers to execute arbitrary code or cause a denial of servic...

CVE-2017-11238

The connected material confirms CVE-2017-11238 is a Java deserialization vulnerability in Adobe ColdFusion’s Flex Integration service (DataServicesCFProxy) exposed via an RMI interface. The flaw allows arbitrary Java objects to be deserialized over the network, enabling remote code execution when...

CVE-2017-11242

Adobe Acrobat/Acrobat Reader is affected by a memory corruption vulnerability in the image conversion EMF processing engine, potentially enabling arbitrary code execution on successful exploitation. Affected products/versions include Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and e...

CVE-2017-11268

Technical details about CVE-2017-11268 are not provided in the connected documents. The initial description contains vulnerability specifics, but no additional technical details are available here. Monitor for updates.

CVE-2017-16367

Technical details for CVE-2017-16367 are not provided in the supplied documents. Monitor for updates.

CVE-2019-7035

Adobe Acrobat and Reader with versions 2019.010.20069 and earlier, 2017.011.30113 and earlier, and 2015.006.30464 and earlier are affected by an out-of-bounds read vulnerability (CVE-2019-7035). Exploitation could lead to information disclosure. This is corroborated by connected security feeds (e...

CVE-2022-27786

CVE-2022-27786 affects Adobe Acrobat Reader DC (and related Acrobat/Reader variants) with font-processing use-after-free leading to arbitrary code execution in the current user. Affected versions include Acrobat Reader DC 22.001.20085 and earlier, 20.005.3031x and earlier, and 17.012.30205 and ea...

CVE-2022-27801

CVE-2022-27801 affects Adobe Acrobat Reader DC (and related Acrobat/Reader components) with use-after-free in annotation processing, allowing arbitrary code execution in the current user context. Affected versions include Acrobat Reader DC 22.001.20085 (and earlier), 20.005.3031x (and earlier) an...

CVE-2024-30304

Adobe Acrobat Reader DC/Continuous versions 20.005.30539, 23.008.20470 and earlier are affected by a Use-After-Free vulnerability that could allow arbitrary code execution in the context of the current user. Exploitation requires user interaction (victim must open a malicious file). CVSSv3.1 base...

CVE-2014-0566

CVE-2014-0566 affects Adobe Reader/Acrobat on Windows and OS X, with versions 10.x before 10.1.12 and 11.x before 11.0.09 susceptible to arbitrary code execution or memory corruption via unspecified vectors (a separate issue from CVE-2014-0565). Connected sources indicate this vulnerability spans...

CVE-2017-11226

CVE-2017-11226 affects Adobe Acrobat Reader/Acrobat up to several older builds (e.g., Reader 2017.009.20058 and earlier; 2017.008.30051 and earlier; 2015.006.30306 and earlier; 11.0.20 and earlier). It is a memory corruption vulnerability in the image processing engine when handling JPEG 2000 (JP...

CVE-2017-11241

Technical details for CVE-2017-11241 are not provided in the connected documents. OpenVAS entries reference broader Acrobat updates and other CVEs but do not disclose specific root cause, affected versions, or fixes. Monitor for updates.

CVE-2017-16363

CVE-2017-16363 affects Adobe Acrobat and Reader (various tracks/versions listed in the description). It involves a buffer over-read in the module that handles character codes for certain textual representations, causing pointer arithmetic to read outside the buffer and potentially reveal sensitiv...

CVE-2019-7036

CVE-2019-7036 is an out-of-bounds read vulnerability in Adobe Acrobat and Reader affecting older builds (e.g., 2019.010.20069 and earlier; 2017.011.30113 and earlier; 2015.006.30464 and earlier). The issue enables information disclosure if exploited. Documented impact in multiple sources (NVD ent...

CVE-2019-8024

CVE-2019-8024 is an Adobe Acrobat/Reader memory management issue (use-after-free) affecting multiple older builds (including 2019.012.20035 and earlier, 2017.011.30142/43, and 2015.006.30497/98). Successful exploitation could result in arbitrary code execution. The connected documents corroborate...

CVE-2019-8209

Adobe Acrobat/Reader (affected builds: 2019.012.20040 and earlier; 2017.011.30148 and earlier; 2015.006.30503 and earlier) contains a use-after-free vulnerability (CVE-2019-8209) that could allow arbitrary code execution on successful exploitation. The issue is documented in the APSB19-49 advisor...

CVE-2021-44706

CVE-2021-44706 is a use‑after‑free vulnerability in Adobe Acrobat Reader DC affecting the processing of Format event actions, leading to arbitrary code execution in the context of the current user. Affected products/versions include Acrobat Reader DC 21.007.20099 and earlier, 20.004.30017 and ear...

CVE-2021-44707

The CVE-2021-44707 entry affects Adobe Acrobat Reader DC and related components. Affected versions include Acrobat Reader DC 21.007.20099 and earlier, 20.004.30017 and earlier, and 17.011.30204 and earlier. The vulnerability is an out-of-bounds write in OTF font parsing that could allow arbitrary...

CVE-2022-34224

Adobe Acrobat Reader DC/Continuous updates are affected by CVE-2022-34224 (Use After Free in AcroForm setItems). Affected versions include 22.001.20142 and earlier, 20.005.30334 and earlier, and 17.012.30229 and earlier. The vulnerability could allow arbitrary code execution in the context of the...

CVE-2015-4435

Technical details about CVE-2015-4435 are not publicly available in the provided connected documents. The Initial Description mentions affected products and a JavaScript API bypass but does not provide concrete exploit specifics, root cause, versions, or mitigations in the supplied sources.

CVE-2016-4207

Technical details for CVE-2016-4207 are not publicly available in the provided connected documents. Monitor for updates from official advisories.

CVE-2017-11224

CVE-2017-11224 affects Adobe Acrobat/Reader (various 2017/earlier builds) with the XFA layout engine. It is described as a use-after-free in XFA, with successful exploitation potentially enabling arbitrary code execution (high severity). The connected OpenVAS entries reference this CVE as part of...

CVE-2017-16361

Technical details for CVE-2017-16361 are not publicly provided in the supplied documents. Monitor for updates; only the vulnerability class (XFDF handling bypass) is mentioned in the Initial Description, with no concrete product/version/root-cause details in the Connected documents.

CVE-2017-2946

CVE-2017-2946 refers to an exploitable heap overflow in Adobe Acrobat Reader when parsing the segment for storing non-graphic information. Affected products include Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, and 11.0.18 and earlier. The surviving connected documen...

CVE-2019-16463

CVE-2019-16463 affects Adobe Acrobat/Reader versions prior to 2019.021.20056 (and older 2017.011.30152/30155, 2015.006.30505) and can lead to arbitrary code execution via an untrusted pointer dereference. The NVD entry lists a high/critical impact (C/H/I/A = High) with network attack vector, no u...

CVE-2021-21042

CVE-2021-21042 affects Acrobat Reader DC and related versions (2020.013.20074 and earlier; 2020.001.30018 and earlier; 2017.011.30188 and earlier). It is an Out-of-bounds Read vulnerability that can lead to arbitrary disclosure of memory stack information and may bypass ASLR. Exploitation require...

CVE-2021-21058

CVE-2021-21058 affects Adobe Acrobat Reader DC (versions 2020.013.20074 and earlier; 2020.001.30018 and earlier; 2017.011.30188 and earlier). Root cause: memory corruption when parsing a specially crafted PDF, leading to arbitrary code execution in the context of the current user. Exploitation re...

CVE-2022-27798

CVE-2022-27798 is a Adobe Acrobat/Reader DC out-of-bounds write vulnerability that leads to arbitrary code execution in the context of the current user. The issue affects multiple versions of Acrobat Reader DC and Acrobat/Reader across Windows/macOS platforms, with exploitation requiring user int...

CVE-2022-28260

CVE-2022-28260 affects Adobe Acrobat/Reader DC: out-of-bounds read when parsing a crafted file, allowing read past end of memory and potential bypass of ASLR. Affected: Acrobat Reader DC 22.001.2011x and earlier; 20.005.3033x and earlier; 17.012.3022x and earlier. Impact: user interaction require...

CVE-2023-38247

Summary (CVE-2023-38247) Adobe Acrobat Reader DC/Classic vulnerable to an out-of-bounds read that could disclose sensitive memory and bypass ASLR. Affected: 23.003.20244 and earlier, and 20.005.30467 and earlier. Exploitation requires user interaction (opening a malicious file). Connected sources...

CVE-2024-34101

CVE-2024-34101 affects Adobe Acrobat Reader (versions 20.005.30574, 24.002.20736 and earlier). The issue is an out-of-bounds read that could disclose sensitive memory and potentially bypass ASLR. Exploitation requires user interaction: a victim must open a malicious file. Connected advisories con...

CVE-2017-11212

CVE-2017-11212 affects Adobe Acrobat Reader (various branches: 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier). The vulnerability is a memory corruption in the image conversion engine when processing Enhanced Metafile Format (EMF) data ...

CVE-2017-11214

Adobe Acrobat Reader vulnerable due to a memory corruption flaw in the image conversion engine when processing EMF data related to rendering a path. Affected products/versions include Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 an...

CVE-2017-11221

CVE-2017-11221 affects Adobe Acrobat/Reader family (including DC/Continuous and Classic tracks). The vulnerability is a type confusion in the annotation functionality that could lead to arbitrary code execution on affected builds. The related OpenVAS entries reference APSB17-24 security updates f...