CVE-2017-16383

Summary: CVE-2017-16383 is reported across Adobe Acrobat/Reader products (Classic, Continuous, DC, on Windows/macOS) with a heap overflow vulnerability when processing a JPEG file embedded in an XPS document. The connected OpenVAS entries enumerate multiple vulnerabilities for Adobe products in A...

CVE-2017-16386

Technical details about CVE-2017-16386 are not publicly provided in the provided connected documents. Monitor for updates.

CVE-2017-16418

Technical details for CVE-2017-16418 are not publicly provided in the supplied documents. Monitor for updates from vendor advisories to obtain affected products, impact, and fixes.

CVE-2017-2963

CVE-2017-2963: Adobe Acrobat Reader/Acrobat prior to versions 15.020.20042, 15.006.30244, and 11.0.18 contain a memory corruption vulnerability in the image conversion engine related to TIFF color profile handling. Successful exploitation could lead to arbitrary code execution. Connected sources ...

CVE-2017-3030

CVE-2017-3030 affects Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, and 15.023.20070 and earlier. The issue is described as an exploitable memory corruption vulnerability in the AES module that could allow arbitrary code execution on successful exploitation. The ini...

CVE-2017-3039

CVE-2017-3039 affects Adobe Acrobat Reader (Windows/macOS) where memory corruption in the PPKLite security handler could allow arbitrary code execution. Affected versions include Acrobat Reader 11.0.19 and earlier; 15.006.30280 and earlier; and 15.023.20070 and earlier. The vulnerability descript...

CVE-2017-3044

Adobe Acrobat Reader (Windows/macOS) affected versions: 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier, due to a memory corruption vulnerability in the JPEG 2000 engine tied to image scaling. Successful exploitation could allow arbitrary code execution with local access a...

CVE-2017-3049

Technical details for CVE-2017-3049 are not provided in the connected documents; the initial description gives a summary (heap overflow in the TIFF image conversion) but no further specifics.

CVE-2018-4901

CVE-2018-4901 affects Adobe Acrobat Reader 2018.009.20050 and earlier, 2017.011.30070 and earlier, and 2015.006.30394 and earlier. The issue is caused by a computation that writes data past the end of the intended buffer within the document identity representation, described as a buffer overflow ...

CVE-2021-39857

CVE-2021-39857 affects Adobe Acrobat Reader DC/IE ActiveX LoadFile vulnerability. The IE add-on (Audot Reader DC for IE) versions 2021.005.20060 and earlier, 2020.004.30006 and earlier, and 2017.011.30199 and earlier are susceptible. Root cause: ActiveX LoadFile behavior enables information discl...

CVE-2021-44715

CVE-2021-44715 refers to an out-of-bounds read in Adobe Acrobat Reader DC when parsing crafted files, allowing reading past allocated memory and potentially bypassing ASLR. Exploitation requires user interaction (victim opens a malicious file). Affected products/versions match Acrobat Reader DC, ...

CVE-2023-38222

Adobe Acrobat Reader (versions 23.003.20244 and earlier; 20.005.30467 and earlier) is affected by a Use-After-Free vulnerability that can lead to arbitrary code execution in the context of the current user. Exploitation requires user interaction (victim must open a malicious file). No mitigations...

CVE-2023-38241

CVE-2023-38241 affects Adobe Acrobat Reader: versions 23.003.20244 and earlier, and 20.005.30467 and earlier. The issue is an out-of-bounds read that can disclose memory and potentially bypass mitigations such as ASLR. Exploitation requires user interaction (victim must open a malicious file). No...

CVE-2024-39425

CVE-2024-39425 concerns Adobe Acrobat Reader and is described as a Time-of-check Time-of-use (TOCTOU) race condition that could lead to privilege escalation. Affected versions include 20.005.30636, 24.002.20965, 24.002.20964, 24.001.30123 and earlier. The exploitation model requires local, low-pr...

CVE-2024-41832

CVE-2024-41832 affects Adobe Acrobat Reader (versions including 20.005.30636, 24.002.20965/20964, 24.001.30123 and earlier). It is a font gvar TupleVariation data out-of-bounds read vulnerability that could disclose sensitive memory and bypass ASLR. Exploitation requires user interaction (victim ...

CVE-2009-0510

Adobe Acrobat/Reader contains a heap-based buffer overflow in the JBIG2 filter (affecting Acrobat/Reader 7.x up to 7.1.3, 8.x up to 8.1.6, and 9.x up to 9.1.2) that could allow a remote attacker to execute arbitrary code. CVE-2009-0510 is among the listed vulnerabilities, with impact described as...

CVE-2010-3626

CVE-2010-3626 affects Adobe Reader and Acrobat 9.x ≤9.4 and 8.x ≤8.2.5 on Windows and macOS, with an arbitrary-code execution via a crafted font. The issue is part of a family of PDF parsing vulnerabilities (listed with CVE-2010-2883/2884/2887/2889, etc.). Remediation in public advisories is to u...

CVE-2010-3657

CVE-2010-3657 targets Adobe Acrobat/Reader 9.x before 9.4 and 8.x before 8.2.5 on Windows/macOS. In affected builds, specially crafted PDF documents could crash acroread or allow arbitrary code execution (unconfirmed in the Initial text; confirmed in connected sources describing multiple CVEs in ...

CVE-2013-0606

Technical details about CVE-2013-0606 are not publicly provided in the supplied documents. Please monitor vendor advisories and security updates for any authoritative information and mitigations.

CVE-2013-2724

CVE-2013-2724 affects Adobe Reader and Acrobat: stack-based buffer overflow in Adobe Reader/Acrobat 9.x before 9.5.5, 10.x before 10.1.7, and 11.x before 11.0.03 allows arbitrary code execution via unspecified vectors. Connected sources corroborate affected products and the root cause (buffer ove...

CVE-2014-0523

CVE-2014-0523 is a memory-corruption vulnerability in Adobe Reader/Acrobat (10.x prior to 10.1.10; 11.x prior to 11.0.07) on Windows and macOS. Concretely, the root cause is an incorrect memory buffer allocation while parsing a corrupted PDF file, which can allow an attacker to execute arbitrary ...

CVE-2014-0525

CVE-2014-0525 : Adobe Reader and Acrobat (Windows/macOS) are affected. The flaw is in the API handling unmapped memory in versions 10.x prior to 10.1.10 and 11.x prior to 11.0.07, enabling arbitrary code execution via unspecified API calls. The issue is documented by Adobe in APSB14-15; remediati...

CVE-2015-3046

Technical details for CVE-2015-3046 are not publicly provided in the connected documents. Monitor for updates from vendors; no specifics on affected products, versions, impact, or fixes are included here.

CVE-2015-3063

Technical details about CVE-2015-3063 are not publicly provided in the supplied documents. Monitor for updates.

CVE-2015-5091

CVE-2015-5091 relates to multiple Adobe products (Reader/Acrobat) where several 10.x/11.x/ DC builds on Windows and macOS are affected by a denial of service caused by invalid data. Public details indicate affected families include: Adobe Reader and Acrobat 10.x before 10.1.15 and 11.x before 11....

CVE-2015-5104

Technical details for CVE-2015-5104 are not publicly available in the provided documents. Monitor for updates.

CVE-2015-5107

Adobe Reader/Acrobat on Windows and macOS is affected by CVE-2015-5107 and related vulnerabilities. The initial CVE entry states a memory/ information disclosure issue with unspecified vectors in Adobe Reader and Acrobat 10.x prior to 10.1.15 and 11.x prior to 11.0.12, and in Adobe Acrobat/Reader...

CVE-2015-5109

CVE-2015-5109 is an Adobe Acrobat/Reader integer-overflow vulnerability affecting Windows and macOS. The issue arises when parsing crafted PDF content, enabling arbitrary code execution. Affected products include Adobe Reader/Acrobat 10.x prior to 10.1.15 and 11.x prior to 11.0.12, Classic before...

CVE-2015-6703

CVE-2015-6703 concerns the loadFlashMovie function in Adobe Reader/Acrobat 10.x (pre-10.1.16) and 11.x (pre-11.0.13), plus various DC/Classic/Continuous releases on Windows and macOS. The vulnerability could allow attackers to obtain sensitive information from process memory by supplying invalid ...

CVE-2017-16374

Technical details for CVE-2017-16374 are not provided in the connected OpenVAS entries; they list this CVE among many but contain no product/version/impact specifics. Monitor for updated advisories.

CVE-2017-16392

Technical details for CVE-2017-16392 are not publicly available in the provided documents. Please monitor for updates from official advisories and vendor bulletins.

CVE-2017-16395

Adobe Acrobat/Reader suffers a vulnerability in the EMF image conversion module due to a buffer length mismatch when processing EMR_STRETCHDIBITS. This can allow arbitrary code execution if an attacker can control accessible memory. Affected versions include 2017.012.20098 and earlier (and other ...

CVE-2017-16399

Adobe Acrobat/Reader (various channels: 2017.012.20098 and earlier, 2017.011.30066 and earlier, 2015.006.30355 and earlier, 11.0.22 and earlier) contains a vulnerability in the XPS parsing module caused by an untrusted pointer dereference. This results in pointers landing outside the target proce...

CVE-2017-2954

CVE-2017-2954 relates to Adobe Acrobat Reader. The vulnerability is a memory corruption issue in the Image Conversion component when handling malformed TIFF images, affecting versions 15.020.20042 and earlier, 15.006.30244 and earlier, and 11.0.18 and earlier. Successful exploitation could lead t...

CVE-2017-3015

Technical details for CVE-2017-3015 are not publicly available in the provided documents. Monitor for updates.

CVE-2020-24427

The CVE-2020-24427 entry describes an input validation vulnerability in Adobe Acrobat/Reader when decoding a crafted codec, which could lead to disclosure of sensitive memory and allow bypassing ASLR. Affected products include Acrobat Reader versions 2020.012.20048 and earlier, 2020.001.30005 and...

CVE-2021-28561

CVE-2021-28561 affects Adobe Acrobat/Reader DC family with a memory corruption vulnerability that could allow arbitrary code execution in the context of the current user. Exploitation requires the user to open a malicious file, i.e., user interaction is required. The provided connected OpenVAS en...

CVE-2021-44713

CVE-2021-44713 : Adobe Acrobat Reader DC is affected by a use-after-free in the processing of Format event actions, potentially leading to a crash/Denial of Service. Affected products/versions include Acrobat Reader DC 21.007.20099 and earlier, 20.004.30017 and earlier, and 17.011.30204 and earli...

CVE-2023-26395

Adobe Acrobat Reader DC/Classic (Windows, macOS) with vulnerable builds up to 23.001.20093 and 20.005.30441 are affected by an out‑of‑bounds write that enables arbitrary code execution in the context of the current user. The issue requires user interaction (the user must open a malicious file). T...

CVE-2023-26407

CVE-2023-26407 affects Adobe Acrobat Reader versions 23.001.20093 and earlier, and 20.005.30441 and earlier, with an Improper Input Validation vulnerability that could lead to arbitrary code execution in the context of the current user. Exploitation requires user interaction to open a malicious f...

CVE-2023-26419

Adobe Acrobat Reader contains a Use After Free vulnerability (CVE-2023-26419) affecting versions 23.001.20093 and earlier, and 20.005.30441 and earlier. The flaw could allow arbitrary code execution in the context of the current user, with the attacker requiring user interaction (victim must open...

CVE-2023-38230

Technical details for CVE-2023-38230 are not publicly provided in the connected documents. The initial description notes a Use-After-Free issue with specific Adobe Acrobat versions but no further technical specifics. Monitor for updates.

CVE-2024-20749

CVE-2024-20749 affects Adobe Acrobat Reader and related components. The advisory notes an out-of-bounds read vulnerability in Acrobat Reader versions such as 20.005.30539, 23.008.20470 and earlier, allowing disclosure of sensitive memory and potential bypass of mitigations like ASLR. Exploitation...

CVE-2024-34097

CVE-2024-34097 affects Adobe Acrobat Reader family (Windows/macOS) with a Use-After-Free issue in specific builds (e.g., 20.005.30574; 24.002.20736 and earlier) that can lead to arbitrary code execution in the current user context and requires user interaction (opening a malicious file). The vuln...

CVE-2007-5666

Adobe Acrobat/Reader (Windows, older than 8.1.2) is affected by an untrusted search path vulnerability where a malicious Security Provider library placed in the reader’s working directory can cause arbitrary code execution with local access. Publicly noted CVEs include CVE-2007-5666, with related...

CVE-2009-2996

CVE-2009-2996 affects Adobe Reader and Acrobat: multiple branches (7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2) are vulnerable. The described issue allows memory corruption that can lead to a denial of service or, potentially, arbitrary code execution via unspecified vectors (distinct ...

CVE-2010-0204

Technical details for CVE-2010-0204 are not publicly provided in the supplied documents; they reference Acrobat/Reader versions and generic impact but do not specify vulnerable components, root cause, or fixes. Monitor for updates.

CVE-2010-3629

CVE-2010-3629 affects Adobe Reader and Acrobat 9.x prior to 9.4 and 8.x prior to 8.2.5 on Windows and macOS, allowing arbitrary code execution via a crafted image. Connected sources confirm this is part of a broader set of vulnerabilities (CVE-2010-2883/2884/…/3629/3632/3658) addressed by vendor ...

CVE-2011-0563

Adobe Reader and Acrobat are vulnerable in multiple old branches: 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Windows and macOS. The issue allows arbitrary code execution or memory corruption via unspecified vectors and is distinct from CVE-2011-0589 and CVE-2011-0606. Patches e...

CVE-2011-0604

CVE-2011-0604 is an XSS vulnerability in Adobe Reader/Acrobat affecting Windows and macOS: Acrobat/Reader 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6. It allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Mitigation per sources is upgrading to v...