CVE-2017-11220

CVE-2017-11220 affects Adobe Acrobat/Reader components across Acrobat DC/Classic/Continuous tracks and Acrobat 2017, with a heap overflow in an internal data structure leading to possible arbitrary code execution. Affected products (per initial description): Adobe Acrobat Reader 2017.009.20058 an...

CVE-2017-11234

Technical details about CVE-2017-11234 are not provided in the supplied documents; no affected product/version/root-cause/impact are specified here. Monitor for updates.

CVE-2017-11249

CVE-2017-11249 affects Adobe Acrobat Reader up to 2017.009.20058 and earlier (also listed older branches) where the image conversion engine can memory-corrupt while parsing an invalid EMF record. Successful exploitation could result in arbitrary code execution. The description specifies affected ...

CVE-2017-11269

CVE-2017-11269 affects multiple Adobe Acrobat products (Reader/DC/Classic/Pro) across Windows, Mac, and mobile tracks. The vulnerability is a memory corruption flaw in the image conversion engine when handling Enhanced Metafile Format (EMF) image stream data, enabling arbitrary code execution on ...

CVE-2021-21033

Adobe Acrobat Reader DC is affected by CVE-2021-21033 (Use After Free) in 2020.013.20074 and earlier, 2020.001.30018 and earlier, and 2017.011.30188 and earlier. An unauthenticated attacker could achieve arbitrary code execution in the user’s context, requiring the victim to open a malicious file...

CVE-2021-21059

CVE-2021-21059 affects Adobe Acrobat Reader DC , specifically versions 2020.013.20074 and earlier, 2020.001.30018 and earlier, and 2017.011.30188 and earlier. The underlying issue is a memory corruption vulnerability triggered while parsing a specially crafted PDF file. An unauthenticated attacke...

CVE-2021-44703

Acrobat Reader DC (Windows/macOS) is vulnerable to a stack-based buffer overflow (CVE-2021-44703) due to insecure handling of a crafted file, potentially enabling arbitrary code execution in the user’s context. Exploitation requires user interaction (opening a malicious file). Affected versions i...

CVE-2023-38244

CVE-2023-38244 affects Adobe Acrobat Reader versions 23.003.20244 (and earlier) and 20.005.30467 (and earlier). The issue is an out-of-bounds read that could disclose memory and bypass mitigations such as ASLR. Exploitation requires user interaction (the victim must open a malicious file). The CV...

CVE-2024-20726

CVE-2024-20726 affects Adobe Acrobat Reader DC (Continuous and Classic) versions including 20.005.30539 and 23.008.20470 and earlier. The issue is an out-of-bounds write that could lead to arbitrary code execution in the user context; exploitation requires the user to open a malicious file. Publi...

CVE-2024-30302

Adobe Acrobat Reader DC/Classic Continuous versions affected by CVE-2024-30302 contain a Use-After-Free vulnerability that could disclose memory and bypass ASLR. Exploitation requires user interaction (victim opens a malicious file); impact notes indicate memory disclosure with high confidentiali...

CVE-2007-0044

CVE-2007-0044 affects Adobe Acrobat Reader Plugin for Firefox/IE/Opera, with the vulnerability allowing remote attackers to induce the browser to make unauthorized requests to other sites via AJAX requests (parameters in FDF/xml/xfdf) after the hash, i.e., a cross-site request forgery (CSRF) in t...

CVE-2010-2168

CVE-2010-2168 affects Adobe Reader/Acrobat 9.x prior to 9.3.3 and 8.x prior to 8.2.3 on Windows and macOS. The vulnerability arises when parsing a PDF containing crafted Flash content, specifically involving the newfunction (0x44) operator, leading to an invalid pointer and memory corruption that...

CVE-2010-2201

CVE-2010-2201 affects Adobe Reader/Acrobat 9.x before 9.3.3 and 8.x before 8.2.3 on Windows and macOS. The vulnerability allows arbitrary-code execution when processing a PDF containing crafted Flash content that uses the pushstring (0x2C) and debugfile (0xF1) operators, described as an “invalid ...

CVE-2011-0588

Adobe Reader/Acrobat is affected by an untrusted search path vulnerability (CVE-2011-0588) on Windows: local users can gain privileges via a Trojan horse DLL placed in the current working directory. Affected versions include Acrobat/Reader 10.x prior to 10.0.1, 9.x prior to 9.4.2, and 8.x prior t...

CVE-2011-2431

CVE-2011-2431 affects Adobe Reader/Acrobat: Adobe Reader and Acrobat 8.x before 8.3.1, 9.x before 9.4.6, and 10.x before 10.1.1 are vulnerable to arbitrary code execution via unspecified vectors (security bypass vulnerability). Connected advisories/documentation confirm that patches exist (e.g., ...

CVE-2015-3073

Technical details about CVE-2015-3073 are not provided in the connected EUVD entries. Please monitor ENISA EUVD records for updates; no specifics on affected products, vectors, or fixes are given.

CVE-2016-0931

CVE-2016-0931 affects Adobe Reader and Acrobat on Windows and macOS. Vulnerable products include: Acrobat/Reader 11.x prior to 11.0.14; Acrobat and Acrobat Reader DC Classic prior to 15.006.30119; Acrobat and Acrobat Reader DC Continuous prior to 15.010.20056. The flaw is triggered via a crafted ...

CVE-2017-11219

Adobe Acrobat Reader 2017.x and earlier (versions listed in CVE-2017-11219 entry: 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier) contains an exploitable use-after-free in the XFA rendering engine. Successful exploitation could lead to ...

CVE-2017-11239

Technical details for CVE-2017-11239 are not publicly available in the provided documents. Monitor for updates from Adobe and vulnerability feeds; no product/version specifics or remediation are provided here.

CVE-2017-11243

Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier contains a memory corruption vulnerability in the XSLT engine. Successful exploitation could lead to arbitrary code execution. This CVE (CVE-2017-11243) affects multipl...

CVE-2017-11261

Technical details for CVE-2017-11261 are not publicly available in the provided documents. Monitor for updates from Adobe advisories and CVE databases.

CVE-2021-28559

Technical details about CVE-2021-28559 are not provided in the connected documents. The OpenVAS entries reference the CVE in broader Adobe vulnerability contexts but do not specify affected products, versions, impact, or fixes. Monitor for updates.

CVE-2022-42342

Adobe Acrobat Reader DC/Continuous (Windows/macOS) is affected by CVE-2022-42342: an out-of-bounds read in font parsing could disclose memory and bypass ASLR. Exploitation requires user interaction (open a malicious file). The entry references the APSB22-46 update as remediation; affected version...

CVE-2023-26408

CVE-2023-26408 affects Adobe Acrobat Reader versions 23.001.20093 and earlier, and 20.005.30441 and earlier, with an Improper Access Control that can lead to arbitrary code execution in the context of the current user. Exploitation requires user interaction: the victim must open a malicious file....

CVE-2010-2209

Technical details for CVE-2010-2209 are not publicly provided in the supplied connected documents. They reference Acrobat/Reader and related CVEs but do not specify affected versions, root cause, exploit conditions, or remediation for this CVE.

CVE-2010-4091

CVE-2010-4091 affects Adobe Reader/Acrobat 8.x (before 8.2.6), 9.x (before 9.4.1), and 10.x (before 10.0.1) on Windows and macOS. It enables remote code execution or a denial-of-service via a crafted PDF that triggers memory corruption in the printSeps function. The vulnerability is addressed in ...

CVE-2015-4451

Technical details for CVE-2015-4451 are not publicly provided in the supplied documents. Monitor for updates.

CVE-2015-5089

Technical details for CVE-2015-5089 are not publicly available in the provided connected documents; monitor for updates.

CVE-2015-5583

This CVE (CVE-2015-5583) affects Adobe Reader and Acrobat when running on Windows or OS X, with vulnerable versions including Adobe Reader/Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat/Reader DC Classic before 2015.006.30094, and Acrobat/Reader DC Continuous before 2015.009.20069. ...

CVE-2015-6709

CVE-2015-6709 affects Adobe Reader and Acrobat: Intel/Windows and OS X platforms with versions listed in the initial description (Adobe Reader/Acrobat 10.x up to 10.1.16; 11.x up to 11.0.13; Acrobat/Reader DC Classic before 2015.006.30094; DC Continuous before 2015.009.20069). The issue allows at...

CVE-2016-0938

The CVE-2016-0938 entry concerns the Acrobat/Reader AcroForm plugin affecting Adobe Reader and Acrobat before 11.0.14, Acrobat and Acrobat Reader DC Classic before 15.006.30119, and Acrobat/Reader DC Continuous before 15.010.20056 on Windows and OS X. The vulnerability allows attackers to execute...

CVE-2017-11210

Adobe Acrobat/Reader 2017-family products are affected by CVE-2017-11210, a memory corruption vulnerability in the font parsing when a font is embedded in an XPS file. Successful exploitation could lead to arbitrary code execution. Affected versions include Acrobat Reader 2017.009.20058 and earli...

CVE-2017-11254

Adobe Acrobat Reader/Acrobat (versions listed in CVE-2017-11254: 2017.009.20058 and earlier; 2017.008.30051 and earlier; 2015.006.30306 and earlier; and 11.0.20 and earlier) contains a use-after-free vulnerability in the JavaScript engine. The issue is exploitable and could lead to arbitrary code...

CVE-2017-11262

Technical details for CVE-2017-11262 are not provided in the supplied documents. Monitor for updates.

CVE-2017-16362

Technical details about CVE-2017-16362 are not provided in the supplied documents. Public information appears limited to vulnerability description and CVSS metrics; monitor for updates from official advisories for affected products, impact, and fixes.

CVE-2021-39841

The CVE-2021-39841 entry describes a Type Confusion vulnerability in Adobe Acrobat Reader DC (affected versions: 2021.005.20060 and earlier; 2020.004.30006 and earlier; 2017.011.30199 and earlier) that could allow arbitrary code execution in the context of the current user. Exploitation requires ...

CVE-2021-44739

CVE-2021-44739 affects Acrobat Reader DC ActiveX Control, with NTLMv2 credential leakage via an Information Disclosure vulnerability in 21.007.20099 and earlier (also affects 20.004.30017 and 17.011.30204). Exploitation requires user interaction (open a malicious Office file or visit a crafted pa...

CVE-2021-45064

CVE-2021-45064 is a use-after-free vulnerability in Adobe Acrobat Reader DC related to the processing of Format event actions, potentially allowing arbitrary code execution in the context of the current user. Affected products/versions (per sources): Acrobat Reader DC and Reader prior to 21.007.2...

CVE-2022-35672

The CVE-2022-35672 entry describes an out-of-bounds read in Adobe Acrobat Reader when parsing a crafted file, potentially enabling code execution in the user’s context. Affected products/versions include Acrobat Reader 22.001.20085 and earlier, 20.005.30314 and earlier, and 17.012.30205 and earli...

CVE-2024-34095

Technical details for CVE-2024-34095 are not publicly provided in the connected documents. Monitor updates from Adobe and security advisories for specifics (affected versions, impact, and fixes).

CVE-2025-27164

CVE-2025-27164 affects Acrobat Reader with an out-of-bounds read in memory that can disclose memory contents and bypass ASLR. Affected versions include 24.001.30225, 20.005.30748, 25.001.20428 and earlier; exploitation requires user interaction (victim opens a malicious file). Root cause is an ou...

CVE-2025-43550

CVE-2025-43550 affects Adobe Acrobat Reader versions 24.001.30235, 20.005.30763, 25.001.20521 and earlier. It is a Use After Free vulnerability that could allow arbitrary code execution in the current user context. Exploitation requires user interaction (opening a malicious file). Affected produc...

CVE-2009-3955

CVE-2009-3955 affects Adobe Reader and Acrobat 9.x prior to 9.3 and 8.x prior to 8.2 on Windows and macOS. The vulnerability is in the Jp2c/JPXDecode stream handling (JPC_MS_RGN marker) where an integer sign extension bypasses a sanity check, causing memory corruption that could allow remote code...

CVE-2012-0777

CVE-2012-0777 affects Adobe Reader/Acrobat on macOS and Linux: JavaScript API in Acrobat/Reader 9.x (before 9.5.1) and 10.x (before 10.1.3) allows remote attackers to execute arbitrary code or cause memory corruption via unspecified vectors. Public advisories confirm this family of issues (CVE-20...

CVE-2015-4452

CVE-2015-4452 affectsAdobe Reader and Acrobat 10.x (pre-10.1.15) and 11.x (pre-11.0.12), plus Acrobat/Reader DC Classic pre-2015.006.30060 and DC Continuous pre-2015.008.20082 on Windows and macOS. The issue is a bypass of JavaScript API execution restrictions, exploitable via unspecified vectors...

CVE-2015-5103

Adobe Reader/Acrobat on Windows and macOS (Adobe Reader 10.x up to 10.1.15 and 11.x up to 11.0.12; Acrobat/Acrobat Reader DC Classic before 2015.006.30060; DC Continuous before 2015.008.20082) are affected by CVE-2015-5103. The description notes arbitrary code execution or a memory corruption-bas...

CVE-2017-11229

Technical details for CVE-2017-11229 are not provided in the supplied connected documents; information about affected products, exploitability, or remediation is not available here. Monitor for updates.

CVE-2017-11231

CVE-2017-11231 concerns Adobe Acrobat/Reader. Exploitation targets the Acrobat/Reader rendering engine via a use-after-free in affected versions (Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier), with potential for a...

CVE-2017-11236

Technical details about CVE-2017-11236 are not publicly provided in the supplied documents. Monitor for updates from Adobe security advisories and vulnerability feeds.

CVE-2017-16365

Adobe Acrobat/Reader (2017 and earlier, including 2017.x) is affected by CVE-2017-16365 due to a buffer over-read in the True Type2 Font parsing module caused by a corrupted cmap input, which leads to pointer arithmetic outside the buffer. Impact per the entry: attacker can obtain sensitive infor...