CVE-2021-44705

CVE-2021-44705 affects Adobe Acrobat/Reader DC (versions 21.007.20099 and earlier, 20.004.30017 and earlier, 17.011.30204 and earlier) with a use-after-free in the processing of Format event actions that could allow arbitrary code execution in the user context. Exploitation requires user interact...

CVE-2021-45061

CVE-2021-45061 is an out-of-bounds write vulnerability in Adobe Acrobat Reader DC font parsing that could allow arbitrary code execution in the context of the current user. Exploitation requires user interaction (victim opens a malicious file). Affected versions include Acrobat Reader DC 21.007.2...

CVE-2021-45062

CVE-2021-45062 affects Adobe Acrobat Reader DC and related builds (e.g., 21.007.20099, 20.004.30017, 17.011.30204 and earlier) via a use-after-free in the processing of Format event actions, leading to arbitrary code execution in the context of the current user. Exploitation requires user interac...

CVE-2023-21581

Adobe Acrobat Reader and related products are affected by an out-of-bounds read vulnerability that can disclose memory and bypass ASLR. Affected: Acrobat Reader versions 22.003.20282 and earlier, 22.003.20281 and earlier, 20.005.30418 and earlier. Exploitation requires user interaction (victim mu...

CVE-2024-30306

Adobe Acrobat Reader has an out-of-bounds read vulnerability (CVE-2024-30306) in parsing crafted files, potentially enabling code execution under the user’s account. Affected versions: 20.005.30539, 23.008.20470 and earlier. Exploitation requires user interaction (opening a malicious file). The p...

CVE-2006-0525

CVE-2006-0525 affects multiple Adobe products (notably Photoshop CS2, Illustrator CS2, and Adobe Help Center) where a large number of .EXE and .DLL files are installed with write-access for the Everyone group. This local-privilege-escalation vulnerability allows bypassing protections via Trojan h...

CVE-2010-2212

CVE-2010-2212 describes a buffer overflow in Adobe Reader and Acrobat 9.x (before 9.3.3) and 8.x (before 8.2.3) on Windows/macOS. A specially crafted PDF containing Flash content with a #1023 (3FFh) tag can trigger memory corruption, allowing arbitrary code execution or a denial of service. Remed...

CVE-2011-2441

CVE-2011-2441 affects Adobe Reader/Acrobat: multiple stack-based buffer overflows in CoolType.dll allow remote code execution via unspecified vectors. Affected products include Adobe Reader/Acrobat 8.x before 8.3.1, 9.x before 9.4.6, and 10.x before 10.1.1. Public sources in connected docs confir...

CVE-2013-0626

Adobe Reader/Acrobat suffers a stack-based buffer overflow (CVE-2013-0626) that allows arbitrary code execution via unspecified vectors. Affected products: Acrobat/Reader 9.x before 9.5.3, 10.x before 10.1.5, and 11.x before 11.0.1. Root cause: buffer overflow in processing (parsing) within these...

CVE-2015-3048

Adobe Reader/Acrobat is affected by multiple vulnerabilities, including CVE-2015-3048, described under APSB15-10. The impact is a buffer overflow/memory corruption that can lead to arbitrary code execution when processing PDF content. Affected products include Adobe Reader/Acrobat on Windows and ...

CVE-2015-3051

CVE-2015-3051 is identified in connected documents as a memory-corruption issue related to font engine handling (STOREWV) across affected PostScript/OpenType paths. The Google Project Zero posts map CVE-2015-3051 to a STOREWV-related issue and discuss exploitation potential via font interpreters ...

CVE-2015-3056

CVE-2015-3056 is described as a memory corruption/remote code execution vulnerability in Adobe Reader and Acrobat (10.x pre-10.1.14; 11.x pre-11.0.11) on Windows and OS X with unspecified vectors. The connected documents mainly discuss font-engine related flaws (e.g., BLEND/CVE-2015-0093 and memo...

CVE-2015-3095

CVE-2015-3095 affects Adobe Reader/Acrobat: 10.x before 10.1.15 and 11.x before 11.0.12, Acrobat/Reader DC Classic before 2015.006.30060, and DC Continuous before 2015.008.20082 on Windows and macOS. A memory-corruption/remote-code-execution risk exists via unspecified vectors, different from CVE...

CVE-2015-5098

CVE-2015-5098 describes a stack underflow in Adobe Reader/Acrobat when parsing a corrupted EMF file, leading to remote code execution via a crafted file. Affected products include Adobe Reader/Acrobat on Windows and OS X, covering 10.x, 11.x, and DC variants (Classic/Continuous). The connected Ch...

CVE-2015-5113

CVE-2015-5113 is a use-after-free vulnerability in Adobe Reader/Acrobat (10.x, 11.x and DC variants) on Windows and OS X. The flaw allows an attacker to run arbitrary code via unspecified vectors by exploiting memory management in the application’s handling of objects, as described across linked ...

CVE-2015-6690

Technical details for CVE-2015-6690 are not publicly provided in the supplied documents; no affected products, exploits, or mitigations are specified here. Monitor official advisories for updates.

CVE-2015-6695

Adobe Acrobat/Reader for Windows and macOS is affected by CVE-2015-7622 (and related CVEs) due to PDF parsing memory corruption. Affected products and versions include: Acrobat/Reader 10.x prior to 10.1.16, 11.x prior to 11.0.13, DC Classic prior to 2015.006.30094, and DC Continuous prior to 2015...

CVE-2015-6702

CVE-2015-6702 affects Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, as well as Acrobat/Reader DC Classic before 2015.006.30094 and DC Continuous before 2015.009.20069, on Windows and macOS. The createSquareMesh function can be invoked with invalid arguments to cause inform...

CVE-2015-6712

Technical details for CVE-2015-6712 are not publicly available in the provided documents. Monitor for updates from vendors and security advisories.

CVE-2016-0943

Adobe Acrobat/Reader before 11.0.14, DC Classic before 15.006.30119, or DC Continuous before 15.010.20056 on Windows/macOS are affected by a flaw that mishandles the Global object, allowing bypass of JavaScript API execution restrictions via unspecified vectors. A remote attacker could exploit th...

CVE-2016-1045

Technical details for CVE-2016-1045 are not provided in the connected documents. Public specifics, affected products, and remediation are not disclosed here; monitor for updates from the listed sources.

CVE-2016-1062

CVE-2016-1062 affects Adobe Reader and Acrobat before 11.0.16, Acrobat and Acrobat Reader DC Classic before 15.006.30172, and Acrobat/Reader DC Continuous before 15.016.20039 on Windows and macOS. The issue allows attackers to bypass JavaScript API execution restrictions via unspecified vectors (...

CVE-2016-1077

Adobe Reader and Acrobat before 11.0.16, Acrobat and Acrobat Reader DC Classic before 15.006.30172, and Acrobat and Acrobat Reader DC Continuous before 15.016.20039 on Windows and OS X are affected by CVE-2016-1077. The vulnerability allows arbitrary code execution or a denial of service via memo...

CVE-2016-1080

Technical details for CVE-2016-1080 are not publicly provided in the supplied documents; no specifics on affected products, versions, exploit vectors, or fixes are present. Monitor for updates.

CVE-2016-4200

Technical details for CVE-2016-4200 are not provided in the connected documents. No specific vulnerability details (affected component, exploit vectors, fixes) are available here. Monitor for updates.

CVE-2016-6979

CVE-2016-6979 is a use-after-free vulnerability in Adobe Reader and Acrobat prior to 11.0.18, Acrobat and Acrobat Reader DC Classic before 15.006.30243, and Acrobat and Acrobat Reader DC Continuous before 15.020.20039 on Windows and macOS. The issue allows attackers to execute arbitrary code via ...

CVE-2017-11245

CVE-2017-11245 : Adobe Acrobat Reader and Acrobat versions up to listed early builds contain a memory corruption vulnerability in the image conversion engine when processing Enhanced Metafile Format (EMF) private data. Successful exploitation could lead to arbitrary code execution. Affected produ...

CVE-2017-11248

Technical details for CVE-2017-11248 are not publicly available in the provided documents; connected entries reference other CVEs and do not supply affected product/version/root-cause specifics. Monitor for updates.

CVE-2017-11271

Adobe Acrobat/Reader CVE-2017-11271 is described as an exploitable memory corruption vulnerability in the image conversion engine when processing Enhanced Metafile Format data, potentially leading to arbitrary code execution. Affected software includes Adobe Acrobat Reader 2017.009.20058 and earl...

CVE-2017-11293

Technical details for CVE-2017-11293 are not provided in the supplied documents; cannot determine affected product/version, root cause, or remediation from these sources.

CVE-2017-16373

Technical details for CVE-2017-16373 are not publicly provided in the connected documents. Monitor for updates.

CVE-2017-16375

CVE-2017-16375 affects Adobe Acrobat and Reader (various 2017/2015/11.x builds) where an untrusted pointer dereference in the JavaScript API engine can cause dereferenced pointers to memory outside the process, exposing sensitive data. The connected OpenVAS entries map this CVE to the APSB17-36 a...

CVE-2017-16385

Adobe Acrobat and Reader are affected by CVE-2017-16385 due to a buffer access with an incorrect length value in TIFF parsing during XPS conversion. Crafted TIFF input can cause a mismatch between allocated memory and access, enabling arbitrary code execution. Affected product/version set include...

CVE-2017-16407

Technical details for CVE-2017-16407 are not provided in the supplied documents. The connected entries reference broad Acrobat vulnerabilities but do not include product/version specifics, impact, or fixes for this CVE. Monitor for updates.

CVE-2017-2956

CVE-2017-2956 is a use-after-free in Adobe Acrobat/Reader’s JavaScript engine (navigation pane) that could enable arbitrary code execution. Affected: Adobe Reader/Acrobat versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier. Root cause: use-after-free in JavaScript eng...

CVE-2017-3020

CVE-2017-3020 affects Adobe Acrobat Reader prior to specific builds (11.0.19 and earlier; 15.006.30280 and earlier; 15.023.20070 and earlier) with a memory address leak in the weblink module. Connected sources corroborate this CVE as part of a broader set of vulnerabilities in Acrobat/Reader trac...

CVE-2017-3032

CVE-2017-3032 concerns memory address leakage in the JPEG 2000 code-stream parser of Adobe Acrobat/Reader. The initial record lists affected products as Adobe Acrobat Reader and Acrobat (various tracks/versions) with older builds (e.g., 11.0.19 and earlier; 15.x series) exhibiting a memory addres...

CVE-2017-3033

CVE-2017-3033 affects Adobe Acrobat Reader up to 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier. The issue is a memory address leak in the software when handling JPEG 2000 code-stream tile data. The provided documents identify the affected product family and versions and ...

CVE-2017-3048

Technical details for CVE-2017-3048 are not publicly provided in the supplied documents. Please monitor for updates.

CVE-2020-24430

CVE-2020-24430 is part of Adobe APSB20-67. Acrobat Reader DC versions 2020.012.20048 and earlier, 2020.001.30005 and earlier, and 2017.011.30175 and earlier are affected by a use-after-free vulnerability when handling malicious JavaScript, which could result in arbitrary code execution in the con...

CVE-2021-21034

Adobe Acrobat Reader DC is affected by CVE-2021-21034 (Out-of-bounds Read) that could allow a local privilege elevation in the context of the current user. Exploitation requires a user to open a malicious file, making it a user-interaction vulnerability. Affected versions per the record include 2...

CVE-2021-45063

Adobe Acrobat Reader DC contains a use-after-free vulnerability (CVE-2021-45063) in the handling of Format event actions, affecting versions 21.007.20099 and earlier, 20.004.30017 and earlier, and 17.011.30204 and earlier. Root cause is a use-after-free that can disclose memory contents; exploita...

CVE-2022-38449

CVE-2022-38449 is an out-of-bounds read in Adobe Acrobat Reader DC/Acrobat (JP2/FOJP parsing) affecting versions 22.002.20212 and earlier, and 20.005.30381 and earlier. Exploitation requires the user to open a malicious file and could disclose memory, bypass ASLR. Remediation is to apply the APSB...

CVE-2023-38228

Technical details for CVE-2023-38228 are not publicly available in the provided documents. Monitor for updates from Adobe and security feeds for affected versions and fixes.

CVE-2023-38232

CVE-2023-38232 affects Adobe Acrobat Reader versions 23.003.20244 (and earlier) and 20.005.30467 (and earlier). The vulnerability is an out-of-bounds read that could disclose memory and potentially bypass mitigations such as ASLR. Exploitation requires user interaction (victim must open a malicio...

CVE-2023-38243

CVE-2023-38243 refers to a Use-After-Free vulnerability in Adobe Acrobat Reader (versions 23.003.20244 and earlier; 20.005.30467 and earlier) that could disclose memory contents and bypass ASLR. The issue requires user interaction, as a victim must open a malicious file. The initial documents spe...

CVE-2024-20729

CVE-2024-20729 affects Adobe Acrobat Reader (DC/Continuous) with Use-After-Free in the Annot3D object zoom handling, impacting v20.005.30539, v23.008.20470 and earlier. The issue can lead to arbitrary code execution in the context of the current user and requires the user to open a malicious file...

CVE-2024-20736

Adobe Acrobat Reader DC/Reader versions 20.005.30539, 23.008.20470 and earlier are affected by a local out-of-bounds read vulnerability that could disclose memory and bypass ASLR. Exploitation requires user interaction (victim opens a malicious file). CVSSv3.1 base score 5.5 (Medium); confidentia...

CVE-2024-34100

Summary of CVE-2024-34100 details : Adobe Acrobat Reader DC/Classic contains a Use-After-Free vulnerability in a component used during file handling, allowing arbitrary code execution in the context of the logged-in user. Exploitation requires user interaction (victim opens a malicious file). Aff...

CVE-2024-39420

CVE-2024-39420 (Acrobat Reader) is a TOCTOU race-condition vulnerability affecting multiple Adobe Reader/Acrobat versions (e.g., 20.005.30636, 24.002.21005, 24.001.30159, 24.003.20054 and earlier). The root cause is a timing issue between checking a condition and using a resource, which could all...