CVE-2011-0566

Adobe Reader/Acrobat for Windows and macOS is affected by CVE-2011-0566. A crafted image can allow remote code execution or memory corruption. Affected versions: Acrobat/Reader 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6. Root cause is parsing of crafted images leading to memory co...

CVE-2011-0600

CVE-2011-0600 affects the U3D component in Adobe Reader and Acrobat. On Windows and macOS, vulnerable versions include Acrobat/Reader 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6. The flaw arises from processing a 3D file with an invalid Parent Node count which leads to an incorrect...

CVE-2011-2440

CVE-2011-2440 is a use-after-free in Adobe Reader and Acrobat (8.x before 8.3.1, 9.x before 9.4.6, and 10.x before 10.1.1) that could allow arbitrary code execution via unspecified vectors. Connected documents confirm the vulnerability is addressed by updates such as Acrobat/Reader 9.4.6 (and rel...

CVE-2011-4373

CVE-2011-4373 affects Adobe Reader/Acrobat on Windows and macOS, where versions prior to 9.5 and 10.x prior to 10.1.2 permit memory corruption that can lead to arbitrary code execution or a denial of service via unspecified vectors. Connected advisories (GLSA-201206-14) corroborate Adobe Reader a...

CVE-2013-0608

CVE-2013-0608 affects Adobe Reader and Acrobat: 9.x before 9.5.3, 10.x before 10.1.5, and 11.x before 11.0.1. It allows arbitrary code execution via unspecified vectors, caused by a logic error, and is part of a set of related CVEs. The published details cite the affected product families but do ...

CVE-2014-8448

CVE-2014-8448 is an information-disclosure vulnerability in Adobe Reader/Acrobat JavaScript API affecting the 10.x line (before 10.1.13) and the 11.x line (before 11.0.10) on Windows and macOS. Connected advisories cite APSB14-28 and describe exploitation via specially crafted PDF files that enti...

CVE-2015-3050

Technical details for CVE-2015-3050 are not publicly provided in the supplied documents; monitor for updates.

CVE-2015-3064

Technical details for CVE-2015-3064 are not publicly available in the provided documents. No concrete product/impact/version information is supplied beyond a general description. Monitor for updates.

CVE-2015-3068

Technical details for CVE-2015-3068 are not publicly available in the provided documents; no affected products, versions, root cause, impact, or fixes are disclosed here. Monitor for official updates.

CVE-2015-3069

Technical details for CVE-2015-3069 are not publicly available in the provided documents; no affected products, root cause, or fixes are specified here. Monitor for updates.

CVE-2015-3070

CVE-2015-3070 affects Adobe Reader/Acrobat 10.x (before 10.1.14) and 11.x (before 11.0.11) on Windows and macOS. The vulnerability arises from memory corruption in font-rendering engines (Type 1/OpenType Charstring interpreter) encountered in Reader/Acrobat and related components (e.g., ATMFD.DLL...

CVE-2015-4444

CVE-2015-4444 is a memory corruption vulnerability in Adobe Reader/Acrobat (Windows and macOS) included in APSB15-15. According to the provided connected documents, the issue arises in how the product parses a specially crafted file, causing memory corruption. Affected products include Adobe Read...

CVE-2015-4446

CVE-2015-4446 is an Adobe Reader/Acrobat access-control bypass affecting multiple 10.x/11.x and DC Classic/Continuous builds on Windows and macOS, enabling a transition from Low Integrity to Medium Integrity via unspecified vectors. Connected material notes a related defense in depth patch (MS15-...

CVE-2015-5094

Technical details about CVE-2015-5094 are not provided in the supplied connected documents. Monitoring for updates is advised; the available sources summarize affected Adobe products but do not disclose specific flaws, impact, or fixes in this dataset.

CVE-2015-5100

Adobe Reader/Acrobat on Windows and macOS prior to 10.1.15 (and 11.x prior to 11.0.12), plus classic and DC variants before 2015.006.30060 and 2015.008.20082, are affected by multiple vulnerabilities that allow arbitrary code execution or memory corruption via unspecified vectors. This is a disti...

CVE-2015-6707

The CVE-2015-6707 entry concerns the ANSendForReview method in Adobe Reader and Acrobat across multiple 10.x/11.x/DC releases on Windows and OS X, where an attacker could bypass JavaScript API execution restrictions. Affected products/versions are listed in the initial description; the vulnerabil...

CVE-2015-7619

Adobe Reader and Acrobat on Windows and macOS are affected by CVE-2015-7619 where the ANShareFile2 method in various 10.x/11.x releases bypasses JavaScript API execution restrictions. Affected ranges include Adobe Reader and Acrobat 10.x before 10.1.16; 11.x before 11.0.13; Acrobat and Acrobat Re...

CVE-2016-1063

Technical details for CVE-2016-1063 are not publicly provided in the connected documents. The supplied sources do not specify affected products, versions, root cause, or remediation beyond the general description. Monitor for updates.

CVE-2016-1089

CVE-2016-1089 is a use-after-free vulnerability in Adobe Reader and Acrobat before 11.0.18, Acrobat and Acrobat Reader DC Classic before 15.006.30243, and Acrobat and Acrobat Reader DC Continuous before 15.020.20039 on Windows and OS X. It allows attackers to execute arbitrary code via unspecifie...

CVE-2016-4201

Technical details for CVE-2016-4201 are not publicly available in the provided documents; no affected products, impact, or remediation specifics are disclosed here. Monitor for updates.

CVE-2016-4266

Technical details about CVE-2016-4266 are not publicly provided in the connected EUVD entries. No affected products, root cause, or fixes are specified here. Monitor for updates from official advisories.

CVE-2017-11253

CVE-2017-11253 affectsAdobe Acrobat and Reader; an exploitable out-of-bounds read could lead to arbitrary code execution in the context of the current user. Affected versions include 2017.012.20098 and earlier; 2017.011.30066 and earlier; 2015.006.30355 and earlier; 11.0.22 and earlier. The conne...

CVE-2017-16369

Technical details for CVE-2017-16369 are not publicly provided in the supplied connected and initial documents; no affected products, root cause, or remediation are specified here. Monitor for updates.

CVE-2017-16380

Technical details for CVE-2017-16380 are not publicly available in the provided documents. The sources reference the vulnerability at a high level but do not specify affected products, root cause, impact, or fixes. Monitor for updates.

CVE-2017-16397

Technical details for CVE-2017-16397 are not provided in the supplied connected documents. No product/version/impact specifics are available here; monitor for updates.

CVE-2017-16398

CVE-2017-16398 is listed among multiple vulnerabilities affecting Adobe Acrobat/Reader products across Windows, Mac, and DC tracks (APSB17-36 family). The OpenVAS entries reference the same CVE alongside numerous others and map to various Adobe product editions (Classic/Continuous/DC). The availa...

CVE-2017-16402

Technical details for CVE-2017-16402 are not publicly available in the provided documents. No affected products, root cause, or remediation specifics are given here. Monitor for updates in the connected sources.

CVE-2017-16406

CVE-2017-16406 affects Adobe Acrobat and Reader (versions listed in the description) and is a type confusion in the EMF processing module. The flaw causes an object to be accessed as an incompatible type, leading to out-of-bounds memory access. Potential consequences include code corruption, cont...

CVE-2017-16410

CVE-2017-16410 affects Adobe Acrobat/Reader (versions 2017.012.20098 and earlier; 2017.011.30066 and earlier; 2015.006.30355 and earlier; 11.0.22 and earlier). The issue arises from untrusted GIF input that is used to calculate an array index in the image conversion module, leading to a write to ...

CVE-2017-16416

CVE-2017-16416 affects Adobe Acrobat and Reader up to the versions listed (2017.012.20098 and earlier, 2017.011.30066 and earlier, 2015.006.30355 and earlier, and 11.0.22 and earlier). The issue is in the image conversion module handling Enhanced Metafile Format Plus (EMF+) data, caused by a comp...

CVE-2017-2953

CVE-2017-2953 refers to memory corruption in the “image conversion” component when processing TIFF images in Adobe Acrobat/Reader. Affected products include Acrobat/Reader versions 11.0.18 and earlier, 15.006.30244 and earlier, and 15.020.20042 and earlier. Successful exploitation could result in...

CVE-2017-3013

CVE-2017-3013 affects Adobe Acrobat Reader and Acrobat on Windows/macOS with insecure library loading (DLL hijacking) in a DLL related to remote logging. Affected versions include Acrobat Reader 11.0.19 and earlier, 15.006.30280 and earlier, and 15.023.20070 and earlier. Connected sources also gr...

CVE-2017-3016

CVE-2017-3016 affects Adobe Acrobat family (Acrobat Reader DC/Classic/Continuous Track and related DC variants) with memory corruption leading to arbitrary code execution. Affected are multiple local builds: Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and...

CVE-2017-3116

CVE-2017-3116 affects Adobe Acrobat/Reader: the vulnerability is a memory corruption in the MakeAccessible plugin while parsing TrueType font data, leading to arbitrary code execution. Affected products/versions per the entry include Acrobat/Reader up to 2017.009.20058 (and older branches: 2017.0...

CVE-2018-4912

CVE-2018-4912 affects Adobe Acrobat Reader (versions 2018.009.20050 and earlier; 2017.011.30070 and earlier; 2015.006.30394 and earlier). The flaw is due to a computation that reads data past the end of the target buffer in the JPEG 2000 handling within the image conversion module, leading to pot...

CVE-2021-39845

CVE-2021-39845 affects Acrobat Reader DC, including 2021.005.20060 and earlier, 2020.004.30006 and earlier, and 2017.011.30199 and earlier. It is a stack overflow vulnerability caused by insecure handling of crafted PDF files, leading to memory corruption in the user’s context. Exploitation requi...

CVE-2023-21605

CVE-2023-21605 affects Adobe Acrobat Reader and Acrobat, where a Heap-based Buffer Overflow in the runtime (reported as CVE-2023-21605; noted in APSB23-01) could lead to arbitrary code execution in the context of the current user. Affected versions: 22.003.20282 and earlier, 22.003.20281 and earl...

CVE-2023-21607

Adobe Acrobat Reader and Acrobat are affected by an Improper Input Validation vulnerability (CVE-2023-21607) that could allow arbitrary code execution in the context of the current user. Exploitation requires user interaction (opening a malicious file). Affected versions include 22.003.20282 and ...

CVE-2023-26417

Adobe Acrobat Reader (versions 23.001.20093 and earlier; 20.005.30441 and earlier) is affected by CVE-2023-26417, a Use-After-Free leading to arbitrary code execution in the context of the current user. Exploitation requires user interaction (victim must open a malicious file). Impact is high (C/...

CVE-2023-38225

Technical details about CVE-2023-38225 are not publicly available in the provided documents; monitor for updates.

CVE-2023-38231

Technical details about CVE-2023-38231 are not publicly available in the provided documents; monitor for updates.

CVE-2023-38234

Adobe Acrobat Reader (DC Classic/Continuous) is affected by CVE-2023-38234: an Access of Uninitialized Pointer vulnerability that can lead to arbitrary code execution in the user’s context. Affected versions include 23.003.20244 and earlier, and 20.005.30467 and earlier; exploitation requires use...

CVE-2023-38235

The CVE-2023-38235 entry describes an out-of-bounds read in Adobe Acrobat Reader versions 23.003.20244 and earlier, and 20.005.30467 and earlier, that could disclose memory and bypass ASLR. Exploitation requires user interaction (victim must open a malicious file). The vulnerability affects Adobe...

CVE-2025-27161

The CVE-2025-27161 entry concerns Adobe Acrobat Reader with out-of-bounds read when parsing a crafted file, potentially enabling code execution in the context of the current user. Affected products include Acrobat Reader versions 24.001.30225, 20.005.30748, 25.001.20428 and earlier. The root caus...

CVE-2025-54255

Adobe Acrobat Reader is affected by CVE-2025-54255 (Violation of Secure Design Principles) in versions 24.001.30254, 20.005.30774, 25.001.20672 and earlier. The issue could bypass an integrity-related security feature and does not require authentication or user interaction; the impact is limited ...

CVE-2009-0511

CVE-2009-0511 is part of a family of JBIG2-related heap-based buffer overflows affecting Adobe Acrobat/Reader 7.x, 8.x, and 9.x prior to the listed fixed versions (e.g., 7.1.3, 8.1.6, 9.1.2). The vulnerability stems from the JBIG2 filter and can allow remote code execution. The CVE is corroborate...

CVE-2010-0197

CVE-2010-0197 affects Adobe Reader and Acrobat 9.x (before 9.3.2) and 8.x (before 8.2.2) on Windows and macOS. The issue enables memory corruption that could cause a denial of service or arbitrary code execution via unspecified vectors. It is a separate issue from CVE-2010-0194, CVE-2010-0201, an...

CVE-2010-0199

CVE-2010-0199 is a buffer‑overflow vulnerability in Adobe Reader/Acrobat affecting Acrobat/Reader 9.x before 9.3.2 and 8.x before 8.2.2 on Windows and macOS, enabling arbitrary code execution via unspecified vectors. The issue is part of a broader Adobe Reader set of vulnerabilities (CVE-2010-019...

CVE-2010-3619

CVE-2010-3619 affects Adobe Reader/Acrobat: Acrobat/Reader 9.x before 9.4 and 8.x before 8.2.5 on Windows and macOS. The vulnerability enables arbitrary code execution or a denial of service via memory corruption, via unspecified vectors (distinct from CVE-2010-2890, 3621, 3622, 3628, 3632, 3658)...

CVE-2010-3656

CVE-2010-3656 affects Adobe Reader/Acrobat 9.x before 9.4 and 8.x before 8.2.5 on Windows and macOS. The vulnerability allows a denial of service via unspecified/unknown vectors (distinct from CVE-2010-3657). Multiple Nessus/OpenVAS entries corroborate affected products and note the issue is part...