CVE-2021-21058

CVE-2021-21058 affects Adobe Acrobat Reader DC (versions 2020.013.20074 and earlier; 2020.001.30018 and earlier; 2017.011.30188 and earlier). Root cause: memory corruption when parsing a specially crafted PDF, leading to arbitrary code execution in the context of the current user. Exploitation re...

CVE-2021-39855

CVE-2021-39855 affects Adobe Acrobat Reader DC ActiveX Control: vulnerable versions include 2021.005.20060 and earlier, 2020.004.30006 and earlier, and 2017.011.30199 and earlier. The issue is an information-disclosure vulnerability that could allow an unauthenticated attacker to obtain NTLMv2 cr...

CVE-2021-40730

CVE-2021-40730 affects Adobe Acrobat Reader DC. The flaw is a use-after-free in the parsing of JPEG2000 images, allowing information disclosure. A remote attacker must entice the user to visit a malicious page or open a crafted file (user interaction required). Affected versions include 21.007.20...

CVE-2021-44707

The CVE-2021-44707 entry affects Adobe Acrobat Reader DC and related components. Affected versions include Acrobat Reader DC 21.007.20099 and earlier, 20.004.30017 and earlier, and 17.011.30204 and earlier. The vulnerability is an out-of-bounds write in OTF font parsing that could allow arbitrary...

CVE-2021-44710

CVE-2021-44710 affects Adobe Acrobat Reader DC and related components. A use-after-free in the processing of Format event actions could lead to arbitrary code execution in the context of the current user. A successful exploit requires the user to open a malicious file, with an attacker-hostile fi...

CVE-2023-29320

CVE-2023-29320 affects Adobe Acrobat Reader, including versions 23.003.20244 and earlier and 20.005.30467 and earlier. The root cause is a Violation of Secure Design Principles that bypasses the API blacklist, enabling arbitrary code execution in the current user context after a user opens a mali...

CVE-2010-2204

Technical details about CVE-2010-2204 are not publicly provided in the supplied documents. The references reference Adobe Reader/Acrobat vulnerabilities, but no concrete root cause, affected versions, exploit status, or patch specifics are present here. Monitor for updates.

CVE-2011-2436

CVE-2011-2436 is a heap-based buffer overflow in Adobe Reader/Acrobat’s image-parsing library. Affected: Acrobat/Reader 8.x before 8.3.1, 9.x before 9.4.6, 10.x before 10.1.1. Fixes are referenced in openSUSE/SUSE advisories showing acroread updated to 9.4.6 (and SUSE/NASL entries) and Gentoo GLS...

CVE-2013-2730

CVE-2013-2730 refers to a buffer overflow affecting Adobe Reader/Acrobat products, including Reader X Sandbox (AdobeCollabSync) and older 9/10/11 lineups, where a vulnerability in the Sandbox/CollabSync path could enable arbitrary code execution. Connected reports indicate a sandbox bypass path a...

CVE-2014-0565

Technical details for CVE-2014-0565 are not publicly provided in the connected documents. Monitor for updates.

CVE-2015-3072

Technical details about CVE-2015-3072 are not publicly provided in the supplied documents. Monitor for updates from official advisories.

CVE-2017-11228

Technical details about CVE-2017-11228 (affected software, root cause, impact, or fixes) are not publicly provided in the supplied documents. Monitor for updates and new disclosures.

CVE-2017-11256

CVE-2017-11256 affects Adobe Acrobat Reader and related Acrobat products (XFA layout engine) with a use-after-free vulnerability in content generation. Successful exploitation could lead to arbitrary code execution. The provided documents do not include patch details or affected version ranges be...

CVE-2017-16361

Technical details for CVE-2017-16361 are not publicly provided in the supplied documents. Monitor for updates; only the vulnerability class (XFDF handling bypass) is mentioned in the Initial Description, with no concrete product/version/root-cause details in the Connected documents.

CVE-2021-28545

CVE-2021-28545 affects Adobe Acrobat Reader DC (versions up to 2020.013.20074, 2020.001.30018, 2017.011.30188 and earlier) where missing support for an integrity check lets an unauthenticated attacker manipulate data in a certified PDF without invalidating the signature; exploitation requires use...

CVE-2010-2890

Technical details for CVE-2010-2890 (affected products, root cause, impact, fixes) are not publicly provided in the supplied documents. Monitor for updates from vendors and security bulletins.

CVE-2010-3622

CVE-2010-3622 affects Adobe Reader/Acrobat on Windows and macOS (AcroRead/Acrobat 9.x before 9.4 and 8.x before 8.2.5). The vulnerability is exploitable via specially crafted PDFs that trigger memory corruption, allowing arbitrary code execution or a denial of service. Connected sources confirm t...

CVE-2011-2442

Adobe Reader/Acrobat is affected by CVE-2011-2442: a logic error vulnerability in versions 8.x prior to 8.3.1, 9.x prior to 9.4.6, and 10.x prior to 10.1.1 that could lead to arbitrary code execution. Connected advisories patch OpenBSD/OpenSUSE/Red Hat and related distributions (e.g., RHSA-2011:1...

CVE-2017-11209

CVE-2017-11209 affects Adobe Acrobat Reader (Windows/macOS) versions including 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier. The issue is a memory corruption vulnerability that occurs when reading a JPEG embedded in an XML Paper Speci...

CVE-2017-11227

Technical details about CVE-2017-11227 are not publicly available in the provided documents. Monitor for updates from official advisories; no specifics on affected products, root cause, or fixes are provided here.

CVE-2017-11233

CVE-2017-11233 affects several Adobe Acrobat Reader versions (including 2017.009.20058, 2017.008.30051, 2015.006.30306, and 11.0.20 and earlier). The issue is a memory corruption vulnerability in the image conversion engine when processing EMF data related to block transfer of pixels. According t...

CVE-2017-16368

Technical details for CVE-2017-16368 are not publicly available in the provided documents. Monitor for updates from Adobe and advisories; no specific affected products, versions, vectors, or fixes are described here.

CVE-2021-28632

CVE-2021-28632 affects Adobe Acrobat Reader DC (and related Acrobat products) and is a Use-After-Free vulnerability in AcroForm fields. The issue can allow arbitrary code execution in the context of the current user, with exploitation requiring user interaction (victim must open a malicious file)...

CVE-2022-35669

Adobe Acrobat Reader DC/Continuious (Windows/macOS) is affected by CVE-2022-35669: an out-of-bounds read in font parsing leading to potential information disclosure and memory bypasses such as ASLR. Affected versions include 22.001.20142 and earlier, 20.005.30334 and earlier. Exploitation require...

CVE-2024-30303

CVE-2024-30303 affects Adobe Acrobat Reader DC: versions 20.005.30539, 23.008.20470 and earlier are vulnerable to a Use-After-Free in AcroForm, enabling arbitrary code execution in the current user’s context. Exploitation requires user interaction (opening a malicious file). Adobe’s APSB24-07 sec...

CVE-2007-0045

CVE-2007-0045 describes a set of cross-site scripting (XSS) vulnerabilities in the Adobe Acrobat Reader Plugin used with browsers on Windows, allowing remote injection of arbitrary JavaScript via a .pdf URL containing a javascript:, res:, or related AJAX parameters (FDF/XML/XFDF) or an anchor nam...

CVE-2008-4814

Adobe Reader/Acrobat is affected by CVE-2008-4814, a vulnerability in a JavaScript method that could allow remote code execution. The issue affects Adobe Reader/Acrobat 8.1.2 and earlier, and versions before 7.1.1, due to an input validation issue. Public advisories describe potential remote code...

CVE-2010-2207

Technical details for CVE-2010-2207 are not publicly provided in the supplied documents. The connected items only reference the CVE in various advisories without listing affected products, versions, or root causes. Monitor for updates.

CVE-2014-0567

CVE-2014-0567 is a heap-based buffer overflow in Adobe Reader and Acrobat 10.x before 10.1.12 and 11.x before 11.0.09 on Windows and macOS. The vulnerability allows attackers to execute arbitrary code via unspecified vectors when processing a PDF containing malicious JavaScript or other content, ...

CVE-2017-16417

CVE-2017-16417 affects Adobe Acrobat/Reader (multiple tracked versions: 2017.012.20098 and earlier; 2017.011.30066 and earlier; 2015.006.30355 and earlier; 11.0.22 and earlier). The issue stems from a computation reading data past the end of a target buffer in the font parsing module, caused by a...

CVE-2021-21033

Adobe Acrobat Reader DC is affected by CVE-2021-21033 (Use After Free) in 2020.013.20074 and earlier, 2020.001.30018 and earlier, and 2017.011.30188 and earlier. An unauthenticated attacker could achieve arbitrary code execution in the user’s context, requiring the victim to open a malicious file...

CVE-2021-21046

CVE-2021-21046 affects Adobe Acrobat Reader DC (versions listed as affected) with a memory corruption vulnerability that could allow an unauthenticated attacker to cause an application denial-of-service. Exploitation requires a user to open a specially crafted file. The connected documents confir...

CVE-2021-21086

CVE-2021-21086 affects Adobe Acrobat Reader DC and related versions (e.g., 2020.013.20074 and earlier; 2020.001.30018 and earlier; 2017.011.30188 and earlier) with an Out-of-bounds Write vulnerability in the CoolType library. The issue allows arbitrary code execution in the context of the current...

CVE-2021-40729

CVE-2021-40729 refers to an out-of-bounds read in Adobe Acrobat Reader DC (versions 21.007.20095 and earlier; 21.007.20096 and earlier; 20.004.30015 and earlier; 17.011.30202 and earlier). The vulnerability could disclose sensitive memory and potentially bypass ASLR. Exploitation requires user in...

CVE-2022-34223

CVE-2022-34223 affects Adobe Acrobat Reader DC/Acrobat/Reader prior to specific patched builds (versions listed in the CVE entry and Nessus APSB22-32 coverage). The issue is described as a Use-After-Free vulnerability that could allow remote code execution in the context of the current user, requ...

CVE-2023-22240

Adobe Acrobat Reader DC/Continuous versi ons 22.003.20282 (and earlier), 22.003.20281 (and earlier), and 20.005.30418 (and earlier) are affected by an out-of-bounds write vulnerability that can result in arbitrary code execution in the context of the current user. Exploitation requires user inter...

CVE-2023-38244

CVE-2023-38244 affects Adobe Acrobat Reader versions 23.003.20244 (and earlier) and 20.005.30467 (and earlier). The issue is an out-of-bounds read that could disclose memory and bypass mitigations such as ASLR. Exploitation requires user interaction (the victim must open a malicious file). The CV...

CVE-2024-30312

Adobe Acrobat Reader, affected in 20.005.30574, 24.002.20736 and earlier, contains an out-of-bounds read that can disclose memory and may bypass ASLR. Exploitation requires user interaction (victim opens a malicious file). Remediation per referenced advisories: update to fixed builds (e.g., Acrob...

CVE-2024-41830

CVE-2024-41830 affects Acrobat Reader: versions 20.005.30636, 24.002.20965, 24.002.20964, 24.001.30123 and earlier are exposed to a Use-After-Free vulnerability that could allow arbitrary code execution in the current user’s context. Exploitation requires user interaction, specifically the victim...

CVE-2024-45107

Summary of CVE-2024-45107 (Adobe Acrobat Reader): Affects Acrobat Reader DC/Windows/macOS versions including 20.005.30636, 24.002.20964/20991, 24.001.30123, and related builds. Root cause is a Use-After-Free in a Doc Object handling flow that can lead to disclosure of memory and potentially bypas...

CVE-2009-3954

CVE-2009-3954 refers to a DLL-loading vulnerability in the 3D implementation of Adobe Reader/Acrobat. Affected products span Adobe Reader/Acrobat 9.x prior to 9.3 and 8.x prior to 8.2 on Windows and macOS. The root cause is a DLL-loading issue in the 3D component that could allow arbitrary code e...

CVE-2010-2201

CVE-2010-2201 affects Adobe Reader/Acrobat 9.x before 9.3.3 and 8.x before 8.2.3 on Windows and macOS. The vulnerability allows arbitrary-code execution when processing a PDF containing crafted Flash content that uses the pushstring (0x2C) and debugfile (0xF1) operators, described as an “invalid ...

CVE-2011-2107

Adobe Flash Player vulnerability CVE-2011-2107 is an XSS issue described as affecting Flash Player before 10.3.181.22 on Windows/macOS/Linux/Solaris and before 10.3.185.22 on Android, allowing remote scripting via unspecified vectors. Connected sources confirm this CVE is tied to Flash Player and...

CVE-2017-11217

CVE-2017-11217 affects Adobe Acrobat Reader and related products (Acrobat Reader DC/Classic/Continuous). The issue is a memory corruption vulnerability in the image conversion engine when processing EMF data that encodes Unicode text strings, which could lead to arbitrary code execution on succes...

CVE-2017-11220

CVE-2017-11220 affects Adobe Acrobat/Reader components across Acrobat DC/Classic/Continuous tracks and Acrobat 2017, with a heap overflow in an internal data structure leading to possible arbitrary code execution. Affected products (per initial description): Adobe Acrobat Reader 2017.009.20058 an...

CVE-2021-28631

CVE-2021-28631 affects Adobe Acrobat Reader DC and related products (Reader DC, Classic, Continuous) with a Use-After-Free in AcroForm Field that could allow arbitrary code execution in the context of the current user. The issue is exploitable via a user‑provided malicious file and requires user ...

CVE-2022-34238

Technical details about CVE-2022-34238 are not publicly available in the provided connected documents. Monitor for updates from vendors and security advisories.

CVE-2022-44517

Acrobat Reader DC (versions 22.001.20085 and earlier; 20.005.3031x and earlier; 17.012.30205 and earlier) is affected by an out-of-bounds read when parsing a crafted file, potentially bypassing ASLR. Exploitation requires user interaction (opening a malicious file). These details are supported by...

CVE-2023-26408

CVE-2023-26408 affects Adobe Acrobat Reader versions 23.001.20093 and earlier, and 20.005.30441 and earlier, with an Improper Access Control that can lead to arbitrary code execution in the context of the current user. Exploitation requires user interaction: the victim must open a malicious file....

CVE-2024-30302

Adobe Acrobat Reader DC/Classic Continuous versions affected by CVE-2024-30302 contain a Use-After-Free vulnerability that could disclose memory and bypass ASLR. Exploitation requires user interaction (victim opens a malicious file); impact notes indicate memory disclosure with high confidentiali...