CVE-2022-24091

Adobe Acrobat Reader DC CVE-2022-24091 is an out-of-bounds write vulnerability in the font parsing path that could allow arbitrary code execution in the context of the current user. Affected versions include 21.007.20099 and earlier, 20.004.30017 and earlier, and 17.011.30204 and earlier; exploit...

CVE-2022-28252

Adobe Acrobat Reader DC is affected by an out-of-bounds read vulnerability when parsing a crafted file in versions 22.001.2011x and earlier, 20.005.3033x and earlier, and 17.012.3022x and earlier. Exploitation could bypass ASLR and requires user interaction (victim must open a malicious file). Re...

CVE-2022-28254

CVE-2022-28254 (Adobe Acrobat/Reader DC) is an out-of-bounds read vulnerability in the PDF parsing path that can bypass ASLR. Affected products include Acrobat Reader DC 22.001.2011x and earlier, 20.005.3033x and earlier, and 17.012.3022x and earlier. Exploitation requires the user to open a mali...

CVE-2022-44514

CVE-2022-44514 : Acrobat Reader DC (versions 22.001.20085 and earlier; 20.005.3031x and earlier; 17.012.30205 and earlier) is affected by a use‑after‑free vulnerability that can cause arbitrary code execution in the current user context. Exploitation requires the user to open a malicious file, en...

CVE-2023-44356

Adobe Acrobat Reader versions 23.006.20360 and earlier (and 20.005.30524 and earlier) are affected by an out-of-bounds read that could disclose sensitive memory and bypass ASLR. Exploitation requires user interaction (victim opens a malicious file). No remediation details are provided in the supp...

CVE-2014-9160

Adobe Reader/Acrobat on Windows and macOS is vulnerable to multiple heap-based buffer overflows in CoolType.dll, triggered by crafted PDF files. Affected products include Adobe Reader and Acrobat 10.x prior to 10.1.14 and 11.x prior to 11.0.11, with CVEs including CVE-2014-9160, CVE-2014-9161 and...

CVE-2021-40724

CVE-2021-40724 affects Adobe Acrobat Reader for Android (versions 21.8.0 and earlier). It describes a path traversal vulnerability that could allow arbitrary code execution in the context of the current user, with exploitation requiring the user to open a malicious file. Multiple connected source...

CVE-2022-27795

CVE-2022-27795 affects Adobe Acrobat Reader DC and related Acrobat/Reader versions prior to the fixed releases. The issue is a use-after-free vulnerability in the processing of the acroform event that could allow arbitrary code execution in the current user context. Exploitation requires user int...

CVE-2022-27796

CVE-2022-27796 affects Adobe Acrobat/Reader DC (versions 22.001.20085 and earlier; 20.005.3031x and earlier; 17.012.30205 and earlier) and is caused by a use-after-free in processing of the acroform event, enabling arbitrary code execution in the user’s context. Exploitation requires user interac...

CVE-2022-28268

Acrobat Reader DC and related Adobe Acrobat/Reader versions (DC: 22.001.20085 and earlier; 20.005.3031x and earlier; 17.012.30205 and earlier) are affected by an out-of-bounds read vulnerability that can disclose memory and bypass ASLR. Exploitation requires user interaction (victim opens a craft...

CVE-2022-34233

Summary: CVE-2022-34233 is a Use-After-Free flaw in Adobe Acrobat Reader versions up to 22.001.20142 (and earlier), 20.005.30334 (and earlier), and 17.012.30229 (and earlier). The issue can disclose memory and bypass ASLR, with exploitation requiring user interaction (open a malicious file). Conn...

CVE-2022-34236

CVE-2022-34236 is an information-disclosure vulnerability in Adobe Acrobat Reader DC/Continuous, caused by a font-parsing out-of-bounds read that could leak memory. Affected are various versions (Reader/DC continuous and prior releases) with exploitation requiring user interaction to open a malic...

CVE-2014-8452

CVE-2014-8452 is an XML External Entity (XXE) information-disclosure flaw in Adobe Reader/Acrobat. Connected sources confirm the issue affects Adobe Reader X/XI prior to 10.1.14/11.0.11, with the root cause being improper XML/ENTITY handling in the product’s XML parser. Public advisories (APSB15-...

CVE-2022-28264

CVE-2022-28264 affects Adobe Acrobat/Reader on multiple lines of versions: Acrobat Reader DC 22.001.2011x (and earlier), 20.005.3033x (and earlier) and 17.012.3022x (and earlier). The issue is an out-of-bounds read when parsing a crafted file, which can cause a read past the end of an allocated m...

CVE-2022-34217

CVE-2022-34217 affects Adobe Acrobat/Reader. Root cause: Out-Of-Bounds Write in font parsing, enabling arbitrary code execution in the context of the current user. Exploitation requires user interaction (victim opens a malicious file). Affected versions include Acrobat Reader 22.001.20142 and ear...

CVE-2023-38240

CVE-2023-38240 affects Adobe Acrobat Reader versions 23.003.20244 and earlier, and 20.005.30467 and earlier, via an out-of-bounds read that can disclose memory and bypass ASLR. Exploitation requires user interaction (opening a crafted file). The provided documents corroborate the vulnerability wi...

CVE-2024-34094

Technical details about CVE-2024-34094 are not publicly available in the provided connected documents. Monitor for updates. If needed, refer to the initial description for the high-level impact (Use After Free causing arbitrary code execution with user interaction).

CVE-2021-39836

CVE-2021-39836 affects Adobe Acrobat-related products: Acrobat Reader DC versions 2021.005.20060 and earlier, 2020.004.30006 and earlier, and 2017.011.30199 and earlier, with a use-after-free in the AcroForm buttonGetIcon handling that could lead to arbitrary code execution in the context of the ...

CVE-2021-44741

Adobe Acrobat Reader DC is affected by CVE-2021-44741: a NULL pointer dereference when parsing a specially crafted file. This allows an unauthenticated attacker to cause an application denial-of-service in the context of the current user, with exploitation requiring user interaction (victim must ...

CVE-2022-28258

CVE-2022-28258 affects Adobe Acrobat/Reader: an out-of-bounds read during parsing of crafted files can read past allocated memory, potentially bypassing ASLR. Affected are Acrobat Reader DC 22.001.2011x and earlier, Acrobat Reader/Classic 20.x 20.005.3033x and earlier, and Acrobat/Reader 17.x 17....

CVE-2022-35691

Adobe Acrobat Reader/DC Classic and related products (e.g., Acrobat Reader DC Continuous) are affected by CVE-2022-35691, a NULL Pointer Dereference that could allow a denial-of-service under the context of the current user. The issue is triggered when a user opens a malicious file, requiring use...

CVE-2010-2884

CVE-2010-2884 affects Adobe Flash Player 10.1.82.76 and earlier (Windows, macOS, Linux, Solaris) and 10.1.92.10 on Android, plus authplay.dll in Adobe Reader/Acrobat 9.x (before 9.4) and 8.x (before 8.2.5). The vulnerability enables remote code execution or memory corruption via unspecified vecto...

CVE-2016-0935

CVE-2016-0935 is a double-free vulnerability in Adobe Reader and Acrobat allowing remote code execution via a crafted ExtGState dictionary. Affected products include Adobe Reader and Acrobat before 11.0.14, Acrobat/Reader DC Classic before 15.006.30119, and Acrobat/Reader DC Continuous before 15....

CVE-2021-21021

CVE-2021-21021 affects Adobe Acrobat Reader DC. It is a Use-After-Free vulnerability in PDF handling that could enable arbitrary code execution in the context of the current user. Exploitation requires user interaction (victim opens a malicious file). Affected versions include 2020.013.20074 and ...

CVE-2021-40723

CVE-2021-40723 affects Adobe Acrobat Reader DC: out-of-bounds read could disclose memory and bypass mitigations like ASLR. A victim must open a malicious file to exploit. Affected versions include 2020.013.20074 and earlier, 2020.001.30018 and earlier, and 2017.011.30188 and earlier. No remediati...

CVE-2021-45067

Summary: CVE-2021-45067 affects Adobe Acrobat Reader DC and older builds (21.007.20099 and earlier; 20.004.30017 and earlier; 17.011.30204 and earlier) with an Access of Memory Location After End of Buffer that could disclose memory contents and potentially bypass ASLR. Exploitation requires user...

CVE-2022-28249

CVE-2022-28249 affects Acrobat Reader DC and related Adobe products (versions listed) with an out-of-bounds read during parsing of a crafted PDF/file, allowing a read past the end of a memory structure and potentially bypassing ASLR. Exploitation requires user interaction (victim must open a mali...

CVE-2022-28253

CVE-2022-28253 is an Adobe Acrobat/Reader DC out-of-bounds read vulnerability affecting multiple older builds of Acrobat Reader DC and Acrobat/Reader Classic lines (e.g., 22.001.2011x, 20.005.3033x, 17.012.3022x and earlier) when parsing a crafted file. The issue can allow reading past the end of...

CVE-2022-28257

CVE-2022-28257 affects Adobe Acrobat/Reader products (e.g., Acrobat Reader DC and related classic/continuous lines) with an out-of-bounds read when parsing a crafted file, potentially bypassing ASLR. Affected versions include Acrobat Reader DC 22.001.2011x and earlier, 20.005.3033x and earlier, a...

CVE-2024-20730

Public description states an Integer Overflow/Wraparound in Adobe Acrobat Reader (versions 20.005.30539, 23.008.20470 and earlier) could lead to arbitrary code execution with user interaction. No additional technical details are provided in the connected documents.

CVE-2017-11232

CVE-2017-11232 affects Adobe Acrobat Reader versions 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier. The vulnerability is a use-after-free in EMF data handling related to brush manipulation, which could lead to arbitrary code execution ...

CVE-2022-28261

Vulnerability summary: Acrobat Reader DC and related Adobe products suffer an out-of-bounds read when parsing a crafted file, potentially allowing bypass of mitigations such as ASLR. Affected software (examples from sources): Acrobat Reader DC 22.001.2011x and earlier; 20.005.3033x and earlier; 1...

CVE-2022-34227

Adobe Acrobat Reader DC/Acrobat Reader versions 22.001.20142 (and earlier), 20.005.30334 (and earlier) and 17.012.30229 (and earlier) are affected by CVE-2022-34227, a Use-After-Free vulnerability that could allow arbitrary code execution in the context of the current user. Exploitation requires ...

CVE-2012-2051

CVE-2012-2051 affects Adobe Reader and Acrobat 9.x before 9.5.2 and 10.x before 10.1.4 on Windows and macOS, enabling attackers to execute arbitrary code or cause a memory corruption denial of service via unspecified vectors. This is described as a different vulnerability from CVE-2012-4147 throu...

CVE-2017-11216

Technical details for CVE-2017-11216 are not publicly available in the provided documents. Monitor for updates; the sources reference multiple Acrobat vulnerabilities but do not specify this CVE’s affected product/version, root cause, or fix.

CVE-2021-44701

CVE-2021-44701 affects Acrobat Reader DC and related Windows/macOS builds (versions 21.007.20099 and earlier, 20.004.30017 and earlier, 17.011.30204 and earlier) via a use-after-free in the processing of Format event actions, enabling arbitrary code execution in the user context. Exploitation req...

CVE-2022-27791

Adobe Acrobat Reader DC CVE-2022-27791 is a stack-based buffer overflow in font processing that can lead to arbitrary code execution under the current user. Affected versions include 22.001.20085 and earlier; 20.005.3031x and earlier; 17.012.30205 and earlier. Exploitation requires user interacti...

CVE-2022-28248

CVE-2022-28248 affects Adobe Acrobat Reader DC and related Acrobat/Reader versions (22.001.2011x and earlier; 20.005.3033x and earlier; 17.012.3022x and earlier) via an out-of-bounds read when parsing crafted files. The root cause is a boundary/ memory structure handling flaw that could allow rea...

CVE-2022-34225

CVE-2022-34225 affects Adobe Acrobat Reader DC/Continuous and Acrobat Reader variants; it is a Use-After-Free in AcroForm exportValues leading to arbitrary code execution under the current user, with exploitation requiring the user to open a malicious file. Vendor advisories indicate updates (APS...

CVE-2022-34226

CVE-2022-34226 affects Adobe Acrobat Reader DC/Acrobat Reader with versions listed as affected (22.001.20142 and earlier for Reader, plus 20.005.30334 and 17.012.30229 and earlier). The issue is an out-of-bounds read when parsing a crafted file, which can allow code execution in the context of th...

CVE-2022-38450

CVE-2022-38450 affects Adobe Acrobat Reader DC and Acrobat Reader DC Continuous (Windows/Mac), involving a stack-based buffer overflow in XFA parsing that can lead to arbitrary code execution in the context of the current user. Exploitation requires the user to open a malicious file, with the iss...

CVE-2023-21614

CVE-2023-21614 affects Adobe Acrobat Reader DC/Adobe Acrobat where fonts parsing causes an out-of-bounds read, exposing sensitive memory. Affected versions include 22.003.20282 and earlier, 22.003.20281 and earlier, and 20.005.30418 and earlier. Root cause: out-of-bounds read leading to informati...

CVE-2013-0603

CVE-2013-0603 affects Adobe Reader/Acrobat 9.x prior to 9.5.3, 10.x prior to 10.1.5, and 11.x prior to 11.0.1, by a heap-based buffer overflow that allows arbitrary code execution via unspecified vectors. The issue is described as a heap overflow in the PDF handling workflow, with updates solving...

CVE-2021-28551

CVE-2021-28551 affects Adobe Acrobat Reader DC family: versions 2021.001.20155 and earlier, 2020.001.30025 and earlier, and 2017.011.30196 and earlier. The issue is an Out-of-bounds read leading to arbitrary code execution in the context of the current user. It is exploitable by an unauthenticate...

CVE-2022-27790

CVE-2022-27790 affects Adobe Acrobat Reader DC and related Acrobat/Reader builds. A use-after-free in font processing could allow arbitrary code execution in the context of the current user, requiring user interaction (victim opens a malicious file). Affected versions include Acrobat Reader DC 22...

CVE-2022-28235

CVE-2022-28235 affects Adobe Acrobat Reader DC and related Acrobat/Reader variants. It is a use-after-free vulnerability in the processing of the acroform event that could allow arbitrary code execution in the current user context. Exploitation requires user interaction (opening a malicious file)...

CVE-2022-28245

CVE-2022-28245 is an out-of-bounds read in Adobe Acrobat/Reader DC when parsing a crafted file, potentially bypassing ASLR. Affected: Acrobat Reader DC 22.001.2011x and earlier; Reader DC 20.005.3033x and earlier; Acrobat 17.012.3022x and earlier. Exploitation requires user interaction (victim op...

CVE-2022-34219

Adobe Acrobat Reader DC/Classic versions up to 22.001.20142 (and earlier) and 17.012.30229 (and earlier) are affected by a Use-After-Free vulnerability that could execute arbitrary code. The issue requires the user to open a malicious file, and is tied to font parsing/use-after-free in the reader...

CVE-2022-34232

Summary of CVE-2022-34232 (Adobe Acrobat/Reader Use-After-Free): Affects Adobe Acrobat Reader versions 22.001.20142 and earlier, 20.005.30334 and earlier, and 17.012.30229 and earlier. Root cause is a Use-After-Free condition in the PDF processing path that can lead to disclosure of sensitive mem...

CVE-2022-35678

CVE-2022-35678 affects Adobe Acrobat Reader DC/Classic products with an out-of-bounds read flaw that can disclose memory contents. The issue, triggered by opening a malicious file, could bypass ASLR and requires user interaction. Affected versions include Acrobat Reader 22.001.20169 and earlier, ...