CVE-2017-11220

CVE-2017-11220 affects Adobe Acrobat/Reader components across Acrobat DC/Classic/Continuous tracks and Acrobat 2017, with a heap overflow in an internal data structure leading to possible arbitrary code execution. Affected products (per initial description): Adobe Acrobat Reader 2017.009.20058 an...

CVE-2017-11234

Technical details about CVE-2017-11234 are not provided in the supplied documents; no affected product/version/root-cause/impact are specified here. Monitor for updates.

CVE-2017-11249

CVE-2017-11249 affects Adobe Acrobat Reader up to 2017.009.20058 and earlier (also listed older branches) where the image conversion engine can memory-corrupt while parsing an invalid EMF record. Successful exploitation could result in arbitrary code execution. The description specifies affected ...

CVE-2017-11269

CVE-2017-11269 affects multiple Adobe Acrobat products (Reader/DC/Classic/Pro) across Windows, Mac, and mobile tracks. The vulnerability is a memory corruption flaw in the image conversion engine when handling Enhanced Metafile Format (EMF) image stream data, enabling arbitrary code execution on ...

CVE-2018-16011

CVE-2018-16011 affects multiple Adobe Acrobat/Reader versions (Windows, macOS) including 2019.010.20064 and earlier, 2017.011.30110 and earlier, and 2015.006.30461 and earlier. The vulnerability is a use-after-free in the application, which, according to the CVE entry, could lead to arbitrary cod...

CVE-2019-16450

CVE-2019-16450 is a vulnerability in Adobe Acrobat/Reader prior to specific updates (e.g., 2019.021.20058, 2017.011.30156/30155, 2015.006.30505 and earlier variants). The issue is an out-of-bounds write in the affected components, which could allow arbitrary code execution on successful exploitat...

CVE-2019-8003

CVE-2019-8003 affects Adobe Acrobat and Reader. Affected versions include Adobe Acrobat/Reader 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and earlier, 2015.006.30497 and earlier, and 2015.006.30498 and earlier. The root cause is a use-after-free vulnerability in the me...

CVE-2019-8029

CVE-2019-8029 is an use-after-free vulnerability affecting Adobe Acrobat and Adobe Reader. The issue is triggered in affected components and could lead to arbitrary code execution. Affected versions include 2019.012.20035 and earlier, 2017.011.30142/30143 and earlier, and 2015.006.30497/30498 and...

CVE-2019-8176

CVE-2019-8176 is a use-after-free vulnerability in Adobe Acrobat and Reader across multiple old versions (2019.012.20040 and earlier; 2017.011.30148 and earlier; 2015.006.30503 and earlier). The underlying issue is a use-after-free condition that could allow arbitrary code execution upon successf...

CVE-2019-8257

CVE-2019-8257 is a use-after-free vulnerability in Adobe Acrobat and Reader affecting versions including 2019.012.20035 and earlier, 2017.011.30142/43, and 2015.006.30497/98. Exploitation could lead to arbitrary code execution. Red Hat/Ubuntu/Nessus/ZDI references document the issue and advisorie...

CVE-2020-9693

Adobe Acrobat/Reader (versions 2020.009.20074 and earlier; 2020.001.30002; 2017.011.30171 and earlier; 2015.006.30523 and earlier) is affected by CVE-2020-9693 due to an out-of-bounds write in the application. Exploitation could lead to arbitrary code execution. The available documents confirm th...

CVE-2020-9706

CVE-2020-9706 : Adobe Acrobat and Reader versions up to 2020.009.20074, 2020.001.30002, 2017.011.30171, and 2015.006.30523 contain an out-of-bounds read vulnerability that could lead to information disclosure. Exploitation is described as a local/remote risk depending on context (per mixed refere...

CVE-2021-21033

Adobe Acrobat Reader DC is affected by CVE-2021-21033 (Use After Free) in 2020.013.20074 and earlier, 2020.001.30018 and earlier, and 2017.011.30188 and earlier. An unauthenticated attacker could achieve arbitrary code execution in the user’s context, requiring the victim to open a malicious file...

CVE-2021-21059

CVE-2021-21059 affects Adobe Acrobat Reader DC , specifically versions 2020.013.20074 and earlier, 2020.001.30018 and earlier, and 2017.011.30188 and earlier. The underlying issue is a memory corruption vulnerability triggered while parsing a specially crafted PDF file. An unauthenticated attacke...

CVE-2021-28636

CVE-2021-28636 is an Uncontrolled Search Path Element vulnerability in Adobe Acrobat Reader DC. Affected products include Acrobat Reader DC versions 2021.005.20054 (and earlier), 2020.004.30005 (and earlier), and 2017.011.30197 (and earlier). The underlying issue is an unsafely chosen search path...

CVE-2021-44703

Acrobat Reader DC (Windows/macOS) is vulnerable to a stack-based buffer overflow (CVE-2021-44703) due to insecure handling of a crafted file, potentially enabling arbitrary code execution in the user’s context. Exploitation requires user interaction (opening a malicious file). Affected versions i...

CVE-2023-38244

CVE-2023-38244 affects Adobe Acrobat Reader versions 23.003.20244 (and earlier) and 20.005.30467 (and earlier). The issue is an out-of-bounds read that could disclose memory and bypass mitigations such as ASLR. Exploitation requires user interaction (the victim must open a malicious file). The CV...

CVE-2024-30302

Adobe Acrobat Reader DC/Classic Continuous versions affected by CVE-2024-30302 contain a Use-After-Free vulnerability that could disclose memory and bypass ASLR. Exploitation requires user interaction (victim opens a malicious file); impact notes indicate memory disclosure with high confidentiali...

CVE-2016-4191

Technical details about CVE-2016-4191 are not publicly available in the provided connected documents. Monitor for updates; no specifics on affected products, root cause, or remediation are available in the supplied sources.

CVE-2016-4196

Technical details for CVE-2016-4196 are not publicly available in the provided documents; EUVD entries mention malware in sbrugna but do not specify affected products, root cause, impact, or remediation. Monitor for updates.

CVE-2016-4202

Technical details for CVE-2016-4202 are not publicly available in the provided documents. Monitor for updates; no specifics on affected products, root cause, impact, or fixes are given.

CVE-2017-11219

Adobe Acrobat Reader 2017.x and earlier (versions listed in CVE-2017-11219 entry: 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier) contains an exploitable use-after-free in the XFA rendering engine. Successful exploitation could lead to ...

CVE-2017-11239

Technical details for CVE-2017-11239 are not publicly available in the provided documents. Monitor for updates from Adobe and vulnerability feeds; no product/version specifics or remediation are provided here.

CVE-2017-11243

Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier contains a memory corruption vulnerability in the XSLT engine. Successful exploitation could lead to arbitrary code execution. This CVE (CVE-2017-11243) affects multipl...

CVE-2017-2940

CVE-2017-2940 affects Adobe Acrobat Reader versions prior to 11.0.19, 15.006.30244 and earlier, and 15.020.20042 and earlier. The issue is a memory corruption vulnerability when processing JPEG 2000 files in the rendering pipeline, which could lead to arbitrary code execution on successful exploi...

CVE-2017-3019

CVE-2017-3019 affects Adobe Acrobat Reader up to versions 11.0.19, 15.006.30280, and 15.023.20070, where the PRC (Product Representation Compact) format parser contains a memory corruption flaw. Successful exploitation could lead to arbitrary code execution on a vulnerable host. The provided docu...

CVE-2017-3021

CVE-2017-3021 : Adobe Acrobat Reader (Windows, Mac, and other platforms) versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier are affected by a memory address leak in the JPEG 2000 parser engine. The CVE is listed with a low overall impact in the CVSS vector, and there...

CVE-2018-15941

Summary: CVE-2018-15941 is an out-of-bounds write vulnerability in Adobe Acrobat and Reader. Affected products include Adobe Acrobat/Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier. The issue stems from an out-of-bounds write in the applicati...

CVE-2019-16465

CVE-2019-16465 is described in public sources as an out-of-bounds read vulnerability affecting Adobe Acrobat and Adobe Reader on Windows and macOS. Affected versions include 2019.021.20056 and earlier, 2017.011.30152 and earlier, 2017.011.30155 and earlier, and 2015.006.30505 and earlier. The vul...

CVE-2019-7039

CVE-2019-7039 affects Adobe Acrobat/Reader on Windows and macOS running versions up to 2019.010.20069 (and older desktop builds such as 2017.011.30113 and 2015.006.30464). The issue is an out-of-bounds write that could allow arbitrary code execution. Connected documents reiterate the same CVE acr...

CVE-2019-7052

Adobe Acrobat and Reader product family is affected by CVE-2019-7052, an out-of-bounds write vulnerability. The entry specifies vulnerable versions as Adobe Acrobat/Reader 2019.010.20069 and earlier, 2017.011.30113 and earlier, and 2015.006.30464 and earlier. The vulnerability can lead to arbitra...

CVE-2019-8038

Adobe Acrobat/Reader versions 2019.012.20035 and earlier, 2017.011.30142/30143 and earlier, and 2015.006.30497/30498 and earlier contain a use-after-free vulnerability (CVE-2019-8038). Successful exploitation could lead to arbitrary code execution. Root cause details are not further specified in ...

CVE-2019-8172

Adobe Acrobat/Reader (Windows/macOS) versions affected include 2019.012.20040 and earlier, 2017.011.30148 and earlier, 2015.006.30503 and earlier. The CVE-2019-8172 issue is described as an out-of-bounds read vulnerability that could lead to information disclosure. The provided connected and init...

CVE-2020-3744

CVE-2020-3744 is an out-of-bounds read vulnerability in Adobe Acrobat and Adobe Reader. Affected products include Acrobat/Reader versions: 2019.021.20061 and earlier, 2017.011.30156 and earlier, and 2015.006.30508 and earlier. Successful exploitation could disclose information. The connected sour...

CVE-2020-3745

Adobe Acrobat and Reader are affected by a use-after-free vulnerability (CVE-2020-3745) that could allow arbitrary code execution. The CVE is part of a broader set of issues in APSB20-05 affecting versions prior to 2015.006.30510 and 2020.006.20034 (e.g., 2019.021.20061 and earlier, 2017.011.3015...

CVE-2020-9592

CVE-2020-9592 is described in the provided documents as a security feature bypass affecting Adobe Acrobat and Reader versions 2020.006.20042 and earlier, 2017.011.30166 and earlier, and 2015.006.30518 and earlier; exploitation could bypass security features. The connected Nessus entries corrobora...

CVE-2021-28559

Technical details about CVE-2021-28559 are not provided in the connected documents. The OpenVAS entries reference the CVE in broader Adobe vulnerability contexts but do not specify affected products, versions, impact, or fixes. Monitor for updates.

CVE-2021-28639

Adobe Acrobat Reader DC (Windows/macOS) versions 2021.005.20054 and earlier, 2020.004.30005 and earlier, and 2017.011.30197 and earlier are affected by a Use-after-free vulnerability (CVE-2021-28639). The issue can lead to arbitrary code execution in the context of the current user, and exploitat...

CVE-2021-28640

CVE-2021-28640 concerns an Use-after-free vulnerability in Adobe Acrobat/Reader DC (versions including 2021.005.20054 and earlier, 2020.004.30005 and earlier, 2017.011.30197 and earlier). Root cause: use-after-free in the application when loading a malicious file, leading to arbitrary code execut...

CVE-2023-26408

CVE-2023-26408 affects Adobe Acrobat Reader versions 23.001.20093 and earlier, and 20.005.30441 and earlier, with an Improper Access Control that can lead to arbitrary code execution in the context of the current user. Exploitation requires user interaction: the victim must open a malicious file....

CVE-2024-20726

CVE-2024-20726 affects Adobe Acrobat Reader DC (Continuous and Classic) versions including 20.005.30539 and 23.008.20470 and earlier. The issue is an out-of-bounds write that could lead to arbitrary code execution in the user context; exploitation requires the user to open a malicious file. Publi...

CVE-2015-4451

Technical details for CVE-2015-4451 are not publicly provided in the supplied documents. Monitor for updates.

CVE-2015-5089

Technical details for CVE-2015-5089 are not publicly available in the provided connected documents; monitor for updates.

CVE-2015-5583

This CVE (CVE-2015-5583) affects Adobe Reader and Acrobat when running on Windows or OS X, with vulnerable versions including Adobe Reader/Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat/Reader DC Classic before 2015.006.30094, and Acrobat/Reader DC Continuous before 2015.009.20069. ...

CVE-2015-6709

CVE-2015-6709 affects Adobe Reader and Acrobat: Intel/Windows and OS X platforms with versions listed in the initial description (Adobe Reader/Acrobat 10.x up to 10.1.16; 11.x up to 11.0.13; Acrobat/Reader DC Classic before 2015.006.30094; DC Continuous before 2015.009.20069). The issue allows at...

CVE-2016-0931

CVE-2016-0931 affects Adobe Reader and Acrobat on Windows and macOS. Vulnerable products include: Acrobat/Reader 11.x prior to 11.0.14; Acrobat and Acrobat Reader DC Classic prior to 15.006.30119; Acrobat and Acrobat Reader DC Continuous prior to 15.010.20056. The flaw is triggered via a crafted ...

CVE-2016-0938

The CVE-2016-0938 entry concerns the Acrobat/Reader AcroForm plugin affecting Adobe Reader and Acrobat before 11.0.14, Acrobat and Acrobat Reader DC Classic before 15.006.30119, and Acrobat/Reader DC Continuous before 15.010.20056 on Windows and OS X. The vulnerability allows attackers to execute...

CVE-2016-1050

Technical details for CVE-2016-1050 are not provided in the supplied connected documents. Monitor for updates.

CVE-2017-11210

Adobe Acrobat/Reader 2017-family products are affected by CVE-2017-11210, a memory corruption vulnerability in the font parsing when a font is embedded in an XPS file. Successful exploitation could lead to arbitrary code execution. Affected versions include Acrobat Reader 2017.009.20058 and earli...

CVE-2017-11254

Adobe Acrobat Reader/Acrobat (versions listed in CVE-2017-11254: 2017.009.20058 and earlier; 2017.008.30051 and earlier; 2015.006.30306 and earlier; and 11.0.20 and earlier) contains a use-after-free vulnerability in the JavaScript engine. The issue is exploitable and could lead to arbitrary code...