CVE-2015-4438

Adobe Reader and Acrobat on Windows and macOS are affected by CVE-2015-4438 in versions: 10.x before 10.1.15 and 11.x before 11.0.12; Acrobat/Reader DC Classic before 2015.006.30060; Acrobat/Reader DC Continuous before 2015.008.20082. The issue bypasses JavaScript API execution restrictions via u...

CVE-2015-6700

Summary: CVE-2015-6700 affects Adobe Reader and Acrobat (Windows and macOS) versions prior to: 10.1.16, 11.0.13, 2015.006.30094 (DC Classic), and 2015.009.20069 (DC Continuous). The vulnerability arises in the setBackground function when processing invalid arguments, enabling an attacker to obtai...

CVE-2015-7614

Technical details about CVE-2015-7614 are not publicly available in the provided documents. Monitor for updates from official advisories; the connected EUVD entries do not supply product/version/impact specifics.

CVE-2016-0936

Technical details for CVE-2016-0936 are not publicly provided in the supplied connected documents. Monitor for updates; no explicit affected products, versions, or remediation details are present beyond the initial description.

CVE-2016-1057

CVE-2016-1057 is described in the initial entry as a use-after-free vulnerability in Adobe Reader/Acrobat products with unspecified vectors. A connected document (Exploit for CVE-2016-1057) claims a PoC exploit for MikroTik RouterOS v6.x that uses a ROP chain for remote code execution, implying a...

CVE-2016-4205

CVE-2016-4205 affects Adobe Reader and Acrobat on Windows and OS X, including Acrobat/Reader DC Classic before 15.006.30198 and DC Continuous before 15.017.20050. The issue allows executing arbitrary code or causing a denial of service via memory corruption through unspecified vectors, and is des...

CVE-2017-11237

Technical details for CVE-2017-11237 are not publicly available in the provided documents. Monitor for updates from vendor advisories and vulnerability databases.

CVE-2017-16360

CVE-2017-16360 affects Adobe Acrobat and Reader (versions listed in the entry and earlier) and is due to a use-after-free in the MakeAccessible plugin during internal data-structure creation. The mismatch between old and new objects allows unintended memory access, potentially enabling arbitrary ...

CVE-2017-16388

Technical details for CVE-2017-16388 are not publicly provided in the connected documents; the OpenVAS entries reference multiple Adobe Acrobat vulnerabilities without specific root cause, affected versions, or fixes for this CVE. Monitor for updates.

CVE-2017-16391

CVE-2017-16391 affects Adobe Acrobat and Reader: versions 2017.012.20098 and earlier, 2017.011.30066 and earlier, 2015.006.30355 and earlier, and 11.0.22 and earlier. The vulnerability arises from untrusted input used to calculate an array index in the printing functionality, leading to a write t...

CVE-2017-2960

CVE-2017-2960 affects Adobe Acrobat/Reader's image conversion engine, due to memory corruption when parsing EXIF metadata. Affected products include Acrobat Reader versions 11.0.18 and earlier, 15.006.30244 and earlier, and 15.020.20042 and earlier. Successful exploitation could lead to arbitrary...

CVE-2017-2965

CVE-2017-2965 describes a memory corruption vulnerability in Adobe Acrobat/Reader's image conversion engine, specifically in TIFF file parsing. Affected products include Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, and 11.0.18 and earlier. Successful exploitat...

CVE-2017-3022

CVE-2017-3022: Adobe Acrobat Reader up to 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have a memory address leak when parsing the header of a JPEG 2000 file. The provided documents do not include further technical details, exploit information, or remediation steps for ...

CVE-2017-3046

Technical details for CVE-2017-3046 are not provided in the connected documents. Monitor for updates from vendor advisories; no remediation or affected version specifics are included here.

CVE-2017-3115

CVE-2017-3115 is an information-disclosure vulnerability in Adobe Acrobat/Reader when handling links in a PDF. Affected: Adobe Acrobat Reader 2017.009.20058 and earlier; 2017.008.30051 and earlier; 2015.006.30306 and earlier; and 11.0.20 and earlier (per initial description). Connected OpenVAS en...

CVE-2017-3120

CVE-2017-3120 affects Adobe Acrobat Reader (various versions prior to later updates) and related Acrobat components. The root cause is a use-after-free in the XFA parsing engine when processing certain internal instructions, enabling arbitrary code execution upon successful exploitation. The entr...

CVE-2018-4903

Adobe Acrobat Reader/Adobe Reader (various affected builds listed in CVE-2018-4903) is vulnerable due to a flaw in TIFF data processing within the XPS module where data is read past the end of a target buffer. This out‑of‑bounds read can lead to exposure of sensitive data. The description covers ...

CVE-2020-24432

CVE-2020-24432 applies to Adobe Acrobat/Reader affected by an improper input validation vulnerability that could allow arbitrary JavaScript execution in the context of the current user. Affected products include Acrobat Reader DC 2020.012.20048 and earlier, 2020.001.30005 and earlier, 2017.011.30...

CVE-2021-39860

CVE-2021-39860 affects Acrobat Pro DC and related variants (2021.005.20060 and earlier; 2020.004.30006 and earlier; 2017.011.30199 and earlier). The issue is a Null pointer dereference, allowing an unauthenticated attacker to disclose sensitive user memory. Exploitation requires user interaction:...

CVE-2021-44702

CVE-2021-44702 affects Adobe Acrobat Reader DC ActiveX (AxAcroPDF) in multiple legacy builds (e.g., 21.007.20099 and earlier; 20.004.30017 and earlier; 17.011.30204 and earlier). It is an information-disclosure flaw that could leak NTLMv2 credentials to an attacker, with exploitation requiring us...

CVE-2021-45060

CVE-2021-45060 affects Adobe Acrobat Reader DC versions 21.007.20099 and earlier, 20.004.30017 and earlier, and 17.011.30204 and earlier. The issue is an out-of-bounds read during parsing of a crafted file, which could cause a read past the end of an allocated memory structure and enable code exe...

CVE-2022-35668

Adobe Acrobat Reader/Acrobat (various editions) is affected by CVE-2022-35668 due to an Improper Input Validation that could disclose memory and bypass ASLR. Exploitation requires a user to open a malicious file, with local access risk and potential information disclosure. Affected versions inclu...

CVE-2022-44515

CVE-2022-44515 affects Adobe Acrobat Reader DC (versions 22.001.20085 and earlier; 20.005.3031x and earlier; 17.012.30205 and earlier). The vulnerability is an out-of-bounds read when parsing a crafted file, allowing read past the end of an allocated memory structure and potentially bypassing mit...

CVE-2024-20747

CVE-2024-20747 affects Adobe Acrobat Reader/Reader DC: Font CharStrings INDEX out-of-bounds read vulnerability in affected versions (e.g., 20.005.30539, 23.008.20470 and earlier). Root cause is an out-of-bounds read in font parsing (CharStrings) that could disclose memory and bypass ASLR; exploit...

CVE-2025-24431

CVE-2025-24431 affects Adobe Acrobat Reader: versions 24.001.30225, 20.005.30748, 25.001.20428 and older are vulnerable to an out-of-bounds read (CWE-125) that can disclose sensitive memory and potentially bypass ASLR. The issue requires user interaction through opening a malicious file. Affected...

CVE-2008-4813

Adobe Reader/Acrobat prior to version 8.1.3 (and earlier than 7.1.1 for some builds) is affected by CVE-2008-4813 due to memory corruption in PDF parsing paths. The vulnerability can be triggered by crafted PDFs (including via a Collab object GetCosObj or malformed PDF objects), enabling remote a...

CVE-2010-3620

CVE-2010-3620 affects Adobe Reader/Acrobat 9.x before 9.4 and 8.x before 8.2.5 on Windows and macOS. The vulnerability allows arbitrary code execution via a crafted image, as part of multiple Adobe Reader vulnerabilities described in concurrent advisories. Connected sources confirm this CVE is bu...

CVE-2010-3621

Technical details for CVE-2010-3621 are not publicly available in the provided connected documents. Monitor for updates.

CVE-2010-3630

CVE-2010-3630 affects Adobe Reader and Acrobat 9.x prior to 9.4 and 8.x prior to 8.2.5 on Windows and macOS. The vulnerability is described as unspecified with possible denial of service or arbitrary code execution via unknown vectors. Public advisories corroborate that specially crafted PDFs cou...

CVE-2011-2097

CVE-2011-2097 is a buffer overflow vulnerability in Adobe Reader and Acrobat affecting Windows and macOS. The issue impacts Adobe Reader/Acrobat 8.x prior to 8.3, 9.x prior to 9.4.5, and 10.x prior to 10.1, with exploitation described as arbitrary code execution via unspecified vectors. This entr...

CVE-2011-2433

Adobe Reader/Acrobat contains a heap-based buffer overflow (CVE-2011-2433) affecting 8.x up to 8.3.1, 9.x up to 9.4.6, and 10.x up to 10.1.1, allowing arbitrary code execution via unspecified vectors. Affected products: Adobe Reader/Acrobat; root cause: heap-based overflow. Impact: remote code ex...

CVE-2011-2434

CVE-2011-2434 is a heap-based buffer overflow in Adobe Reader/Acrobat versions: 8.x before 8.3.1, 9.x before 9.4.6, and 10.x before 10.1.1, allowing arbitrary code execution via unspecified vectors. The connected advisories indicate that Adobe released fixes (e.g., Acrobat/Reader updates to 9.4.6...

CVE-2011-2438

CVE-2011-2438 is a vulnerability in Adobe Reader/Acrobat’s image-parsing library causing multiple stack-based buffer overflows. Affected products include Adobe Reader/Acrobat 8.x (before 8.3.1), 9.x (before 9.4.6), and 10.x (before 10.1.1). The consequence is arbitrary code execution via unspecif...

CVE-2013-0602

CVE-2013-0602 is a use-after-free vulnerability in Adobe Reader and Acrobat affecting 9.x (before 9.5.3), 10.x (before 10.1.5), and 11.x (before 11.0.1) that could allow arbitrary code execution via unspecified vectors. The linked advisories indicate this CVE was addressed by updating to Adobe Re...

CVE-2015-3053

CVE-2015-3053 is an Adobe Acrobat/Reader use-after-free vulnerability. A remote attacker could exploit a use-after-free in memory handling of PDF objects to achieve arbitrary code execution via a specially crafted PDF file. Affected products include Adobe Acrobat/Reader versions 10.x before 10.1....

CVE-2015-3060

Technical details about CVE-2015-3060 are not provided in the connected documents; no affected products, root cause, or fixes are disclosed. Monitor for updates.

CVE-2015-3062

Technical details about CVE-2015-3062 are not publicly available in the provided Connected documents. Monitor ENISA EUVD entries and other sources for updated vulnerability specifics, affected products, impact, and remediation.

CVE-2015-3074

Adobe Reader and Acrobat 10.x before 10.1.14 and 11.x before 11.0.11 on Windows and OS X are affected by CVE-2015-3074, a vulnerability that allows attackers to bypass intended restrictions on JavaScript API execution via unspecified vectors. The description indicates this is a different issue fr...

CVE-2016-0941

CVE-2016-0941 is a use-after-free vulnerability in the Search object implementation of Adobe Reader and Acrobat and related products. Affected versions include Adobe Reader/Acrobat before 11.0.14, Acrobat and Acrobat Reader DC Classic before 15.006.30119, and Acrobat/Reader DC Continuous before 1...

CVE-2016-1008

Summary (CVE-2016-1008) : Adobe Reader and Acrobat on Windows/macOS were affected by an untrusted search path vulnerability that could allow local privilege elevation via a Trojan horse DLL in an unspecified directory. This CVE is part of APSB16-09 and ties to vulnerable versions: Acrobat/Reader ...

CVE-2017-11255

Technical details for CVE-2017-11255 are not provided in the connected documents. The sources reference older Adobe TIFF processing vulnerabilities but do not disclose affected products, versions, root cause, or fixes for this CVE.

CVE-2017-11265

Technical details for CVE-2017-11265 are not provided in the supplied Connected documents. The sources reference Acrobat advisories and multiple vulnerabilities but do not reveal specific affected products/versions, impact, or remediation for this CVE.

CVE-2017-11267

Technical details about CVE-2017-11267 (EMF memory corruption vulnerability in Adobe Acrobat/Reader) are not provided in the connected documents. Monitor for official advisories and fixes.

CVE-2017-16404

Technical details for CVE-2017-16404 are not provided in the supplied documents; no affected product/version or root cause is specified here. Monitor for updates.

CVE-2017-2947

CVE-2017-2947 affects Adobe Acrobat Reader versions earlier than 15.020.20042, 15.006.30244, and 11.0.18. The vulnerability is a security bypass in which manipulation of the Form Data Format (FDF) is exploited to bypass protections. The connected documents confirm the affected versions and descri...

CVE-2017-3057

CVE-2017-3057 concerns Adobe Reader/Acrobat in Windows/macOS/Linux where vulnerable builds before certain version points—Adobe Acrobat Reader 11.0.19 and earlier; 15.006.30280 and earlier; 15.023.20070 and earlier—exhibit an exploitable use-after-free in the JavaScript API used for collaboration....

CVE-2020-24437

CVE-2020-24437 affects Adobe Acrobat/Reader DC: versions 2020.012.20048 and earlier, 2020.001.30005 and earlier, and 2017.011.30175 and earlier are vulnerable to a use-after-free in the processing of Format event actions, potentially allowing arbitrary code execution under the current user. Explo...

CVE-2021-21039

CVE-2021-21039 affects Adobe Acrobat Reader DC across multiple versions (2020.013.20074 and earlier; 2020.001.30018 and earlier; 2017.011.30188 and earlier). The vulnerability is a Use-After-Free in the PDF handling/processing path that could allow arbitrary code execution in the context of the c...

CVE-2021-39844

CVE-2021-39844 affects Adobe Acrobat Reader DC and Acrobat Reader prior to 2017.011.30202/2020.004.30015/2021.007.20091. It is an out-of-bounds read vulnerability that could disclose arbitrary memory information in the context of the current user. Exploitation requires user interaction: the victi...

CVE-2021-44705

CVE-2021-44705 affects Adobe Acrobat/Reader DC (versions 21.007.20099 and earlier, 20.004.30017 and earlier, 17.011.30204 and earlier) with a use-after-free in the processing of Format event actions that could allow arbitrary code execution in the user context. Exploitation requires user interact...