CVE-2017-3011

CVE-2017-3011 affects Adobe Acrobat Reader (versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier). The vulnerability is an exploitable integer overflow in the CCITT fax PDF filter that could lead to arbitrary code execution. The connected documents do not provide addit...

CVE-2017-3052

Technical details for CVE-2017-3052 are not provided in the supplied documents. Monitor for updates from official advisories.

CVE-2017-3055

CVE-2017-3055 affects Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, and 15.023.20070 and earlier. The vulnerability is an exploitable heap overflow in JPEG 2000 parsing of the fragment list tag, which could lead to arbitrary code execution. The description does not ...

CVE-2017-3121

CVE-2017-3121 affects Adobe Acrobat/Reader with memory corruption in the Enhanced Metafile Format (EMF) parser. Affected products include Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier. Exploitation could lead to arbitrar...

CVE-2020-24434

CVE-2020-24434 is an out-of-bounds read vulnerability in Adobe Acrobat/Reader (Acrobat Reader DC and Acrobat Pro DC) affecting versions such as 2020.012.20048 and earlier, 2020.001.30005 and earlier, and 2017.011.30175 and earlier. The root cause is an out-of-bounds read that could disclose sensi...

CVE-2021-21060

CVE-2021-21060 affects Adobe Acrobat Pro DC and related Reader DC components, via improper input validation that could disclose sensitive user information. Exploitation requires a victim to open a malicious file, with the attacker not requiring authentication. Affected versions include Acrobat/Re...

CVE-2021-21061

CVE-2021-21061 affects Adobe Acrobat Pro DC: versions 2020.013.20074 and earlier, 2020.001.30018 and earlier, and 2017.011.30188 and earlier. It is a Use-After-Free vulnerability during parsing of a specially crafted PDF file, allowing an unauthenticated attacker to disclose information in the co...

CVE-2021-21063

CVE-2021-21063 affects Adobe Acrobat Reader DC versions <= 2020.013.20074, <= 2020.001.30018, and

CVE-2021-44711

CVE-2021-44711 affects Adobe Acrobat Reader DC and related components (versions 21.007.20099 and earlier; 20.004.30017 and earlier; 17.011.30204 and earlier) with an Integer Overflow/Wraparound in annotation gestures that can lead to arbitrary code execution under the current user. Exploitation r...

CVE-2023-21606

CVE-2023-21606 – Adobe Acrobat/Reader out-of-bounds write (font parsing) . Affects Adobe Acrobat Reader DC/Viewer versions including 22.003.20282 and earlier, 22.003.20281 and earlier, and 20.005.30418 and earlier. The root cause is an out-of-bounds write in font parsing that can lead to arbitrar...

CVE-2024-34099

CVE-2024-34099 refers to an Improper Access Control vulnerability in Adobe Acrobat Reader that could lead to arbitrary code execution in the context of the current user. Exploitation requires user interaction: a victim must open a crafted/malicious file. Affected products include Acrobat Reader D...

CVE-2026-47914

CVE-2026-47914 affects Acrobat Reader versions 24.001.30365, 26.001.21651 and earlier. The issue is a Use After Free (CWE-416) vulnerability that could allow arbitrary code execution in the context of the current user. Exploitation requires user interaction: a victim must open a malicious file. C...

CVE-2011-0589

CVE-2011-0589 affects Adobe Reader/Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Windows and macOS. The issue is a memory corruption vulnerability in PDF handling that could allow arbitrary code execution or a denial of service via unspecified vectors. Affected products sh...

CVE-2011-0598

Adobe Reader/Acrobat is affected by an integer overflow in ACE.dll triggered by crafted ICC data, enabling remote code execution. Affected products/versions: Acrobat/Reader 8.x before 8.2.6, 9.x before 9.4.2, and 10.x before 10.0.1 on Windows and macOS. The vulnerability is distinct from CVE-2011...

CVE-2011-2435

CVE-2011-2435 is a buffer overflow in Adobe Reader/Acrobat affecting 8.x before 8.3.1, 9.x before 9.4.6, and 10.x before 10.1.1 that could allow arbitrary code execution. Public references show patches issued (e.g., openSUSE/SUSE advisories and Gentoo GLSA) indicating upgrading to Adobe Reader/Ac...

CVE-2015-3054

Adobe Reader and Acrobat on Windows/macOS are affected by a use-after-free vulnerability in memory handling when processing crafted PDFs (CVE-2015-3054). The underlying issue is an object handling error that can lead to arbitrary code execution. Public advisories (APSB15-10) reference this CVE fa...

CVE-2015-4449

Technical details for CVE-2015-4449 are not publicly available in the provided documents. Monitor for updates from official advisories; no concrete product/version/impact details are present here.

CVE-2016-1069

Technical details for CVE-2016-1069 are not publicly available in the provided documents. Monitor for updates from vendors and security advisories.

CVE-2016-4197

Technical details about CVE-2016-4197 are not publicly provided in the supplied documents; monitor for updates from official advisories.

CVE-2016-4268

Technical details for CVE-2016-4268 are not publicly available in the provided documents; no vendor/version/impact specifics are disclosed here. Monitor for updates.

CVE-2017-2939

CVE-2017-2939 : Adobe Acrobat Reader/Acrobat on Windows and macOS is affected by a memory corruption vulnerability when processing a malformed cross-reference table. A successful exploit could lead to arbitrary code execution. Affected versions include Acrobat/Reader 15.020.20042 and earlier, 15....

CVE-2017-3027

Adobe Acrobat Reader (Windows/macOS) versions 11.0.19 and earlier, 15.006.30280 and earlier, and 15.023.20070 and earlier are affected by a use-after-free in the XFA module (related to the choiceList element) that could allow arbitrary code execution on successful exploitation. The initial descri...

CVE-2017-3040

CVE-2017-3040 affects Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, and 15.023.20070 and earlier. The vulnerability is a memory corruption flaw in the JBIG2 image compression module that could allow arbitrary code execution on successful exploitation. The provided d...

CVE-2017-3053

CVE-2017-3053 affects Adobe Acrobat Reader up to 11.0.19, 15.006.30280, and 15.023.20070; it is a memory address leak in the image conversion engine related to parsing the APP13 segment in JPEG files. The provided documents do not specify a fixed version or remediation patch. No exploit details o...

CVE-2020-24433

CVE-2020-24433 is a local privilege-escalation in Adobe Acrobat Reader DC (installer component) affecting versions 2017.011.30175 and earlier, 2020.012.20048 and earlier, and 2020.001.30005 and earlier. The flaw can allow a non-admin user to delete arbitrary files and potentially execute code as ...

CVE-2021-21035

CVE-2021-21035 is a Use-After-Free vulnerability in Adobe Acrobat Reader DC affecting versions 2020.013.20074 and earlier, 2020.001.30018 and earlier, and 2017.011.30188 and earlier. An unauthenticated attacker could achieve arbitrary code execution in the context of the current user, with exploi...

CVE-2021-21040

CVE-2021-21040 affects Adobe Acrobat Reader DC. Vulnerable are versions 2020.013.20074 and earlier, 2020.001.30018 and earlier, and 2017.011.30188 and earlier. The issue is a Use After Free in the way certain components handle memory, leading to arbitrary code execution in the context of the curr...

CVE-2021-44704

CVE-2021-44704 is a use-after-free in Adobe Acrobat/Reader DC related to the processing of Format event actions that could allow arbitrary code execution in the current user context. Affected are Acrobat Reader DC versions 21.007.20099 and earlier, 20.004.30017 and earlier, and 17.011.30204 and e...

CVE-2023-26405

CVE-2023-26405 concerns Adobe Acrobat Reader (versions 23.001.20093 and earlier; 20.005.30441 and earlier). The issue is an improper input validation vulnerability in Acrobat Reader that can lead to arbitrary code execution in the context of the current user. Exploitation requires user interactio...

CVE-2023-26424

Summary: CVE-2023-26424 affects Adobe Acrobat Reader up to versions 23.001.20093 and 20.005.30441 (and earlier). It is a Use-After-Free vulnerability that could allow arbitrary code execution in the context of the current user. Exploitation requires user interaction, as a victim must open a malic...

CVE-2024-30305

Adobe Acrobat Reader DC/Reader for Windows and Mac (versions 20.005.30539, 23.008.20470 and earlier) is affected by a Use-After-Free vulnerability that could allow arbitrary code execution in the context of the current user. Exploitation requires user interaction (victim opens a malicious file). ...

CVE-2025-27158

CVE-2025-27158 affects Adobe Acrobat Reader DC/Classic: Uninitialized Pointer (CWE-824) leading to arbitrary code execution in the context of the current user. Affected versions include 24.001.30225, 20.005.30748, 25.001.20428 and earlier. Exploitation requires user interaction (opening a malicio...

CVE-2025-27163

CVE-2025-27163 affects Adobe Acrobat Reader; an out-of-bounds read could disclose memory and bypass ASLR. Affected versions include 24.001.30225, 20.005.30748, 25.001.20428 and earlier. Exploitation requires user interaction (open a malicious file). Mitigation: update to the latest version per ad...

CVE-2025-43576

CVE-2025-43576 affects Adobe Acrobat Reader versions 24.001.30235, 20.005.30763, 25.001.20521 and earlier with a Use After Free vulnerability that can lead to arbitrary code execution in the context of the current user. Exploitation requires user interaction (opening a malicious file). Affected p...

CVE-2025-64785

CVE-2025-64785 affects Adobe Acrobat Reader/Reader: versions including 24.001.30264, 20.005.30793, 25.001.20982, 24.001.30273, 20.005.30803 and earlier. The vulnerability is an Untrusted Search Path issue that could allow arbitrary code execution in the user’s context by maliciously altering the ...

CVE-2026-47919

CVE-2026-47919 affects Acrobat Reader versions 24.001.30365, 26.001.21651 and earlier. The issue is a Use After Free (CWE-416) vulnerability that could lead to arbitrary code execution in the context of the current user . Exploitation requires user interaction — the victim must open a malicious f...

CVE-2011-2095

CVE-2011-2094/2095/2097 : Buffer overflow flaws in Adobe Reader and Acrobat (Windows/Mac) allow arbitrary code execution via unspecified vectors. Affected: Adobe Reader/Acrobat 8.x before 8.3, 9.x before 9.4.5, and 10.x before 10.1. Root cause is network-executable or document-based flaws describ...

CVE-2013-0613

Adobe Reader/Acrobat: CVE-2013-0613 is an integer overflow vulnerability in Adobe Reader and Acrobat 9.x (before 9.5.3), 10.x (before 10.1.5), and 11.x (before 11.0.1) that could allow arbitrary code execution via unspecified vectors. Connected advisories confirm this CVE is among a set of Adobe ...

CVE-2015-3061

Technical details (affected software, root cause, impact, patches) are not publicly available in the provided documents beyond the general CVE description. Monitor for updates.

CVE-2016-0934

Adobe Acrobat/Reader on Windows and macOS is affected by CVE-2016-0934 due to a use-after-free in AGM.dll. The vulnerability impacts Acrobat/Reader before 11.0.14, and Acrobat/Reader DC Classic before 15.006.30119, and DC Continuous before 15.010.20056, enabling arbitrary code execution via a mal...

CVE-2017-11222

Technical details for CVE-2017-11222 are not publicly available in the provided documents. Monitor for updates.

CVE-2017-16366

Technical details for CVE-2017-16366 are not publicly provided in the supplied documents. Monitor for updates.

CVE-2017-16381

CVE-2017-16381 affects Adobe Acrobat and Reader. A vulnerability exists due to a buffer access with an incorrect length value when processing TIFF files embedded within an XPS document. Crafted TIFF input can cause a mismatch between the allocated buffer size and the access allowed, enabling arbi...

CVE-2017-16415

CVE-2017-16415 affects Adobe Acrobat and Reader (versions listed in the description) with a vulnerability in font encoding handling where a computation writes data past the end of the intended buffer due to an out-of-range pointer offset. This can potentially allow the attacker to corrupt sensiti...

CVE-2017-16419

CVE-2017-16419 describes a stack exhaustion vulnerability in Adobe Acrobat and Reader due to unbounded recursion in the JavaScript API. Affected products/versions include Acrobat/Reader 2017.012.20098 and earlier, 2017.011.30066 and earlier, 2015.006.30355 and earlier, and 11.0.22 and earlier. Th...

CVE-2017-2951

Summary (CVE-2017-2951): Adobe Acrobat/Reader versions affected include 15.020.20042 and earlier, 15.006.30244 and earlier, and 11.0.18 and earlier. The vulnerability is a use-after-free in the XFA engine, related to the sub-form functionality. Successful exploitation could result in arbitrary co...

CVE-2017-3038

Adobe Acrobat/Reader (Classic and Continuous/Reader DC) is affected by CVE-2017-3038 due to a memory corruption in TTF stream parsing, impacting Windows and macOS/Classic tracks for versions up to 11.0.19, 15.006.30280 and 15.023.20070 and earlier. The issue is addressed in Adobe APSB17-11 (2017)...

CVE-2017-3042

Adobe Acrobat Reader pre-update versions (11.0.19 and earlier; 15.006.30280 and earlier; 15.023.20070 and earlier) are affected by a heap overflow in image conversion when parsing TIFF offsets, potentially allowing arbitrary code execution. Remediation: upgrade to a fixed release (e.g., 11.0.20 o...

CVE-2017-3054

Technical details for CVE-2017-3054 are not publicly available in the provided documents. Monitor for updates.

CVE-2021-39849

Adobe Acrobat: CVE-2021-39849 is a Null Pointer Dereference in Acrobat Reader DC (and related Classic/Continuous updates) that can cause an application DoS in the context of the logged-in user. Exploitation requires user interaction (victim opens a malicious file). Affected versions include Acrob...