CVE-2017-11214

Adobe Acrobat Reader vulnerable due to a memory corruption flaw in the image conversion engine when processing EMF data related to rendering a path. Affected products/versions include Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 an...

CVE-2017-11246

Technical details for CVE-2017-11246 are not provided in the supplied documents; no product/version/root-cause/exploit details are available here. Monitor for updates.

CVE-2017-2946

CVE-2017-2946 refers to an exploitable heap overflow in Adobe Acrobat Reader when parsing the segment for storing non-graphic information. Affected products include Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, and 11.0.18 and earlier. The surviving connected documen...

CVE-2019-16463

CVE-2019-16463 affects Adobe Acrobat/Reader versions prior to 2019.021.20056 (and older 2017.011.30152/30155, 2015.006.30505) and can lead to arbitrary code execution via an untrusted pointer dereference. The NVD entry lists a high/critical impact (C/H/I/A = High) with network attack vector, no u...

CVE-2019-7037

Adobe Acrobat and Reader (Windows/macOS) versions 2019.010.20069 and earlier, 2017.011.30113 and earlier, and 2015.006.30464 and earlier are affected by an out-of-bounds write vulnerability (CVE-2019-7037) that could lead to arbitrary code execution if exploited. Connected documents corroborate t...

CVE-2019-8041

Summary (CVE-2019-8041) : Adobe Acrobat and Adobe Reader are affected by a heap overflow vulnerability in versions 2019.012.20035 and earlier, 2017.011.30142/30143 and earlier, and 2015.006.30497/30498 and earlier. Successful exploitation could lead to arbitrary code execution. The provided sourc...

CVE-2020-24426

CVE-2020-24426 affects Adobe Acrobat/Reader: out-of-bounds read in Acrobat/Reader components leading to information disclosure; exploitation requires user interaction (victim opens a malicious file) and could bypass ASLR. Affected products include Acrobat Reader DC versions 2020.012.20048 and ear...

CVE-2021-21058

CVE-2021-21058 affects Adobe Acrobat Reader DC (versions 2020.013.20074 and earlier; 2020.001.30018 and earlier; 2017.011.30188 and earlier). Root cause: memory corruption when parsing a specially crafted PDF, leading to arbitrary code execution in the context of the current user. Exploitation re...

CVE-2021-39855

CVE-2021-39855 affects Adobe Acrobat Reader DC ActiveX Control: vulnerable versions include 2021.005.20060 and earlier, 2020.004.30006 and earlier, and 2017.011.30199 and earlier. The issue is an information-disclosure vulnerability that could allow an unauthenticated attacker to obtain NTLMv2 cr...

CVE-2021-40730

CVE-2021-40730 affects Adobe Acrobat Reader DC. The flaw is a use-after-free in the parsing of JPEG2000 images, allowing information disclosure. A remote attacker must entice the user to visit a malicious page or open a crafted file (user interaction required). Affected versions include 21.007.20...

CVE-2021-44707

The CVE-2021-44707 entry affects Adobe Acrobat Reader DC and related components. Affected versions include Acrobat Reader DC 21.007.20099 and earlier, 20.004.30017 and earlier, and 17.011.30204 and earlier. The vulnerability is an out-of-bounds write in OTF font parsing that could allow arbitrary...

CVE-2021-44710

CVE-2021-44710 affects Adobe Acrobat Reader DC and related components. A use-after-free in the processing of Format event actions could lead to arbitrary code execution in the context of the current user. A successful exploit requires the user to open a malicious file, with an attacker-hostile fi...

CVE-2023-29320

CVE-2023-29320 affects Adobe Acrobat Reader, including versions 23.003.20244 and earlier and 20.005.30467 and earlier. The root cause is a Violation of Secure Design Principles that bypasses the API blacklist, enabling arbitrary code execution in the current user context after a user opens a mali...

CVE-2017-11228

Technical details about CVE-2017-11228 (affected software, root cause, impact, or fixes) are not publicly provided in the supplied documents. Monitor for updates and new disclosures.

CVE-2017-11256

CVE-2017-11256 affects Adobe Acrobat Reader and related Acrobat products (XFA layout engine) with a use-after-free vulnerability in content generation. Successful exploitation could lead to arbitrary code execution. The provided documents do not include patch details or affected version ranges be...

CVE-2017-16361

Technical details for CVE-2017-16361 are not publicly provided in the supplied documents. Monitor for updates; only the vulnerability class (XFDF handling bypass) is mentioned in the Initial Description, with no concrete product/version/root-cause details in the Connected documents.

CVE-2019-7028

Adobe Acrobat/Reader on Windows, macOS, and related platforms are affected by CVE-2019-7028, an out-of-bounds read in versions 2019.010.20069 and earlier, 2017.011.30113 and earlier, and 2015.006.30464 and earlier. Exploitation could lead to information disclosure. The vulnerability is documented...

CVE-2019-7050

Affected product: Adobe Acrobat and Adobe Reader (Windows/macOS). Versions listed in APSB19-07 and related advisories (e.g., 2019.010.20069 and earlier; 2017.011.30113 and earlier; 2015.006.30464 and earlier) are vulnerable. The exploitation surface includes multiple memory‑corruption issues: use...

CVE-2019-8044

CVE-2019-8044 corresponds to a double-free vulnerability in Adobe Acrobat and Reader. The affected products include Adobe Acrobat/Reader on Windows and macOS, with versions such as 2019.012.20035 and earlier, 2017.011.30142/30143 and earlier, and 2015.006.30497/30498 and earlier. The root cause i...

CVE-2021-28545

CVE-2021-28545 affects Adobe Acrobat Reader DC (versions up to 2020.013.20074, 2020.001.30018, 2017.011.30188 and earlier) where missing support for an integrity check lets an unauthenticated attacker manipulate data in a certified PDF without invalidating the signature; exploitation requires use...

CVE-2024-30303

CVE-2024-30303 affects Adobe Acrobat Reader DC: versions 20.005.30539, 23.008.20470 and earlier are vulnerable to a Use-After-Free in AcroForm, enabling arbitrary code execution in the current user’s context. Exploitation requires user interaction (opening a malicious file). Adobe’s APSB24-07 sec...

CVE-2017-11209

CVE-2017-11209 affects Adobe Acrobat Reader (Windows/macOS) versions including 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier. The issue is a memory corruption vulnerability that occurs when reading a JPEG embedded in an XML Paper Speci...

CVE-2017-11227

Technical details about CVE-2017-11227 are not publicly available in the provided documents. Monitor for updates from official advisories; no specifics on affected products, root cause, or fixes are provided here.

CVE-2017-11233

CVE-2017-11233 affects several Adobe Acrobat Reader versions (including 2017.009.20058, 2017.008.30051, 2015.006.30306, and 11.0.20 and earlier). The issue is a memory corruption vulnerability in the image conversion engine when processing EMF data related to block transfer of pixels. According t...

CVE-2017-16368

Technical details for CVE-2017-16368 are not publicly available in the provided documents. Monitor for updates from Adobe and advisories; no specific affected products, versions, vectors, or fixes are described here.

CVE-2021-28632

CVE-2021-28632 affects Adobe Acrobat Reader DC (and related Acrobat products) and is a Use-After-Free vulnerability in AcroForm fields. The issue can allow arbitrary code execution in the context of the current user, with exploitation requiring user interaction (victim must open a malicious file)...

CVE-2022-35669

Adobe Acrobat Reader DC/Continuious (Windows/macOS) is affected by CVE-2022-35669: an out-of-bounds read in font parsing leading to potential information disclosure and memory bypasses such as ASLR. Affected versions include 22.001.20142 and earlier, 20.005.30334 and earlier. Exploitation require...

CVE-2017-16417

CVE-2017-16417 affects Adobe Acrobat/Reader (multiple tracked versions: 2017.012.20098 and earlier; 2017.011.30066 and earlier; 2015.006.30355 and earlier; 11.0.22 and earlier). The issue stems from a computation reading data past the end of a target buffer in the font parsing module, caused by a...

CVE-2017-2949

Adobe Acrobat/Reader (Windows and macOS) prior to listed patched builds is affected by CVE-2017-2949, a heap overflow in the XSLT engine that could enable arbitrary code execution. Nessus data for APSB17-01 corroborates multiple XSLT/XFA-related issues and memory-corruption variants. Affected ver...

CVE-2019-8257

CVE-2019-8257 is a use-after-free vulnerability in Adobe Acrobat and Reader affecting versions including 2019.012.20035 and earlier, 2017.011.30142/43, and 2015.006.30497/98. Exploitation could lead to arbitrary code execution. Red Hat/Ubuntu/Nessus/ZDI references document the issue and advisorie...

CVE-2021-21033

Adobe Acrobat Reader DC is affected by CVE-2021-21033 (Use After Free) in 2020.013.20074 and earlier, 2020.001.30018 and earlier, and 2017.011.30188 and earlier. An unauthenticated attacker could achieve arbitrary code execution in the user’s context, requiring the victim to open a malicious file...

CVE-2021-21046

CVE-2021-21046 affects Adobe Acrobat Reader DC (versions listed as affected) with a memory corruption vulnerability that could allow an unauthenticated attacker to cause an application denial-of-service. Exploitation requires a user to open a specially crafted file. The connected documents confir...

CVE-2021-21086

CVE-2021-21086 affects Adobe Acrobat Reader DC and related versions (e.g., 2020.013.20074 and earlier; 2020.001.30018 and earlier; 2017.011.30188 and earlier) with an Out-of-bounds Write vulnerability in the CoolType library. The issue allows arbitrary code execution in the context of the current...

CVE-2021-40729

CVE-2021-40729 refers to an out-of-bounds read in Adobe Acrobat Reader DC (versions 21.007.20095 and earlier; 21.007.20096 and earlier; 20.004.30015 and earlier; 17.011.30202 and earlier). The vulnerability could disclose sensitive memory and potentially bypass ASLR. Exploitation requires user in...

CVE-2022-34223

CVE-2022-34223 affects Adobe Acrobat Reader DC/Acrobat/Reader prior to specific patched builds (versions listed in the CVE entry and Nessus APSB22-32 coverage). The issue is described as a Use-After-Free vulnerability that could allow remote code execution in the context of the current user, requ...

CVE-2023-22240

Adobe Acrobat Reader DC/Continuous versi ons 22.003.20282 (and earlier), 22.003.20281 (and earlier), and 20.005.30418 (and earlier) are affected by an out-of-bounds write vulnerability that can result in arbitrary code execution in the context of the current user. Exploitation requires user inter...

CVE-2023-38244

CVE-2023-38244 affects Adobe Acrobat Reader versions 23.003.20244 (and earlier) and 20.005.30467 (and earlier). The issue is an out-of-bounds read that could disclose memory and bypass mitigations such as ASLR. Exploitation requires user interaction (the victim must open a malicious file). The CV...

CVE-2024-30312

Adobe Acrobat Reader, affected in 20.005.30574, 24.002.20736 and earlier, contains an out-of-bounds read that can disclose memory and may bypass ASLR. Exploitation requires user interaction (victim opens a malicious file). Remediation per referenced advisories: update to fixed builds (e.g., Acrob...

CVE-2024-41830

CVE-2024-41830 affects Acrobat Reader: versions 20.005.30636, 24.002.20965, 24.002.20964, 24.001.30123 and earlier are exposed to a Use-After-Free vulnerability that could allow arbitrary code execution in the current user’s context. Exploitation requires user interaction, specifically the victim...

CVE-2024-45107

Summary of CVE-2024-45107 (Adobe Acrobat Reader): Affects Acrobat Reader DC/Windows/macOS versions including 20.005.30636, 24.002.20964/20991, 24.001.30123, and related builds. Root cause is a Use-After-Free in a Doc Object handling flow that can lead to disclosure of memory and potentially bypas...

CVE-2017-11217

CVE-2017-11217 affects Adobe Acrobat Reader and related products (Acrobat Reader DC/Classic/Continuous). The issue is a memory corruption vulnerability in the image conversion engine when processing EMF data that encodes Unicode text strings, which could lead to arbitrary code execution on succes...

CVE-2017-11220

CVE-2017-11220 affects Adobe Acrobat/Reader components across Acrobat DC/Classic/Continuous tracks and Acrobat 2017, with a heap overflow in an internal data structure leading to possible arbitrary code execution. Affected products (per initial description): Adobe Acrobat Reader 2017.009.20058 an...

CVE-2017-2940

CVE-2017-2940 affects Adobe Acrobat Reader versions prior to 11.0.19, 15.006.30244 and earlier, and 15.020.20042 and earlier. The issue is a memory corruption vulnerability when processing JPEG 2000 files in the rendering pipeline, which could lead to arbitrary code execution on successful exploi...

CVE-2019-8172

Adobe Acrobat/Reader (Windows/macOS) versions affected include 2019.012.20040 and earlier, 2017.011.30148 and earlier, 2015.006.30503 and earlier. The CVE-2019-8172 issue is described as an out-of-bounds read vulnerability that could lead to information disclosure. The provided connected and init...

CVE-2020-3742

CVE-2020-3742 affects Adobe Acrobat/Reader prior to the APSB20-05 update: versions 2019.021.20061 and earlier, 2017.011.30156 and earlier, and 2015.006.30508 and earlier. It is a heap overflow vulnerability that could allow arbitrary code execution upon successful exploitation. Connected sources ...

CVE-2021-28631

CVE-2021-28631 affects Adobe Acrobat Reader DC and related products (Reader DC, Classic, Continuous) with a Use-After-Free in AcroForm Field that could allow arbitrary code execution in the context of the current user. The issue is exploitable via a user‑provided malicious file and requires user ...

CVE-2022-34238

Technical details about CVE-2022-34238 are not publicly available in the provided connected documents. Monitor for updates from vendors and security advisories.

CVE-2022-44517

Acrobat Reader DC (versions 22.001.20085 and earlier; 20.005.3031x and earlier; 17.012.30205 and earlier) is affected by an out-of-bounds read when parsing a crafted file, potentially bypassing ASLR. Exploitation requires user interaction (opening a malicious file). These details are supported by...

CVE-2023-26408

CVE-2023-26408 affects Adobe Acrobat Reader versions 23.001.20093 and earlier, and 20.005.30441 and earlier, with an Improper Access Control that can lead to arbitrary code execution in the context of the current user. Exploitation requires user interaction: the victim must open a malicious file....

CVE-2024-30302

Adobe Acrobat Reader DC/Classic Continuous versions affected by CVE-2024-30302 contain a Use-After-Free vulnerability that could disclose memory and bypass ASLR. Exploitation requires user interaction (victim opens a malicious file); impact notes indicate memory disclosure with high confidentiali...