CVE-2011-2098

CVE-2011-2098 affects Adobe Reader and Acrobat on Windows and macOS, with the vulnerability stemming from memory corruption in multiple versions. Specifically, affected are Adobe Reader/Acrobat 8.x before 8.3, 9.x before 9.4.5, and 10.x before 10.1; exploitation could lead to arbitrary code execu...

CVE-2013-0610

Adobe Reader/Acrobat is affected by a stack-based buffer overflow (CVE-2013-0610) in versions: Reader/Acrobat 9.x before 9.5.3, 10.x before 10.1.5, and 11.x before 11.0.1. Exploitation could allow arbitrary code execution via unspecified vectors; exploitation details are not publicly specified in...

CVE-2013-0614

Technical details for CVE-2013-0614 are not publicly provided in the connected documents. The entry references unspecified vectors and related CVEs; monitor for updates for affected products, impact, and fixes.

CVE-2015-3076

CVE-2015-3076 is a memory-corruption vulnerability affecting Adobe Reader/Acrobat on Windows and OS X (Reader/Acrobat 10.x before 10.1.14 and 11.x before 11.0.11). Public advisories describe exploitation via parsing a malicious PDF (potentially containing JavaScript), leading to remote code execu...

CVE-2015-5106

CVE-2015-5106 affects Adobe Reader/Acrobat 10.x and 11.x, plus DC variants, on Windows/macOS. The description states a bypass of access restrictions that elevates from Low Integrity to Medium Integrity via unspecified vectors, and is described as a different issue from CVE-2015-4446 and CVE-2015-...

CVE-2015-6699

CVE-2015-6699 affects Adobe Reader/Acrobat on Windows and OS X: 10.x before 10.1.16, 11.x before 11.0.13, DC Classic before 2015.006.30094, and DC Continuous before 2015.009.20069. The addForegroundSprite function can reveal sensitive information from process memory via invalid arguments (informa...

CVE-2015-6720

Technical details for CVE-2015-6720 are not publicly provided in the supplied documents. The connected EUVD records mention malware generically but do not specify affected products, root cause, or remediation. Monitor for updates.

CVE-2016-1038

CVE-2016-1038 affects Adobe Reader/Acrobat before certain versions on Windows and OS X, where attackers can bypass JavaScript API execution restrictions via unspecified vectors. The issue is described as a distinct vulnerability from CVE-2016-1039, 1040, 1041, 1042, 1044, 1062, and 1117. Connecte...

CVE-2016-1040

Adobe Reader and Acrobat affected: versions prior to 11.0.16, 15.006.30172, or 15.016.20039 (Windows and macOS) are vulnerable to bypassing JavaScript API execution restrictions via unspecified vectors. This is a different vulnerability than CVE-2016-1038/1039/1041/1042/1044/1062/1117. Severity i...

CVE-2016-1067

No technical details about CVE-2016-1067 are present in the connected documents; the provided sources do not specify affected products, impact, or remediation for this CVE.

CVE-2016-4206

Technical details for CVE-2016-4206 are not publicly available in the provided documents; monitor for updates.

CVE-2016-4255

Adobe Reader/Acrobat affected by CVE-2016-4255 (Use-after-free) on Windows and OS X. Vulnerable components: Adobe Reader and Acrobat before 11.0.17; Acrobat/Reader DC Classic before 15.006.30198 and DC Continuous before 15.017.20050. Vulnerability allows arbitrary code execution via unspecified v...

CVE-2017-16390

CVE-2017-16390 affects Adobe Acrobat/Reader: multiple affected versions (Acrobat/Reader 2017 and earlier, 2015, 11.x) with a use-after-free in the JavaScript engine API. The fault is a mismatch between an old and a new object, allowing unintended memory access and potentially leading to code corr...

CVE-2017-16394

Technical details for CVE-2017-16394 are not publicly available in the provided documents. Monitor for updates; the connected OpenVAS entries list the CVE but do not disclose affected products/versions or root cause.

CVE-2017-2944

Adobe Acrobat/Reader (Windows and macOS) versions affected: 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier. Vulnerability in the TIFF parsing path of the rendering engine that causes memory corruption, with exploitation potentially leading to arbitrary code execution. No ...

CVE-2017-3034

Summary (CVE-2017-3034) : Adobe Acrobat Reader versions 11.0.19 and earlier; 15.006.30280 and earlier; 15.023.20070 and earlier contain an exploitable integer overflow in the XML Forms Architecture (XFA) engine, related to layout functionality. Exploitation could lead to arbitrary code execution....

CVE-2017-3065

Technical details for CVE-2017-3065 are not publicly available in the provided documents; monitor for updates.

CVE-2018-4872

Adobe Acrobat Reader (various affected versions: 2018.009.20050 and earlier; 2017.011.30070 and earlier; 2015.006.30394 and earlier) contains a security bypass that enables sandbox escape, due to the way a cross call is handled. The provided documents do not include explicit exploit steps, impact...

CVE-2023-26421

CVE-2023-26421 affects Adobe Acrobat Reader versions 23.001.20093 and earlier, and 20.005.30441 and earlier. The root cause is an integer underflow/wraparound in the product, leading to arbitrary code execution in the context of the current user. Exploitation requires user interaction: a victim m...

CVE-2023-38242

Adobe Acrobat Reader (Windows and macOS) versions 23.003.20244 and earlier, and 20.005.30467 and earlier, are affected by an out-of-bounds read vulnerability in the PDF reader component that could disclose sensitive memory and bypass ASLR. Exploitation requires user interaction (victim must open ...

CVE-2023-38246

Adobe Acrobat Reader is affected by an Access of Uninitialized Pointer vulnerability (CVE-2023-38246) in versions 23.003.20244 and earlier, and 20.005.30467 and earlier. The issue could lead to arbitrary code execution in the context of the current user, and exploitation requires user interaction...

CVE-2025-27159

CVE-2025-27159 is an Adobe Acrobat Reader Use-After-Free vulnerability that can lead to arbitrary code execution in the context of the current user. A successful exploit requires user interaction (the victim must open a malicious file). Affected versions include Acrobat Reader 24.001.30225, 20.00...

CVE-2026-47961

CVE-2026-47961 affects Acrobat Reader versions 24.001.30365, 26.001.21651 and earlier. The vulnerability is an out-of-bounds read (CWE-125) that could disclose sensitive memory. Exploitation requires user interaction: a victim must open a malicious file. Affected component is within Acrobat Reade...

CVE-2009-0512

CVE-2009-0512 is a heap-based buffer overflow in the JBIG2 filter of Adobe Reader/Acrobat (versions 7.x before 7.1.3, 8.x before 8.1.6, 9.x before 9.1.2) that could allow remote code execution via unspecified vectors. Connected advisories (RHSA-2009:1109, SUSE/openSUSE/Nessus entries) corroborate...

CVE-2009-2986

CVE-2009-2986 affects Adobe Reader/Acrobat: multiple heap-based buffer overflows in Adobe Reader and Acrobat 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2 may allow attackers to execute arbitrary code via unspecified vectors. Affected components are the PDF handling code in Reader/Acroba...

CVE-2011-0567

CVE-2011-0567 affects Adobe Reader and Acrobat (AcroRd32.dll) on Windows and macOS. The vulnerability occurs in the PDF/image handling in versions: Acrobat/Reader 10.x prior to 10.0.1, 9.x prior to 9.4.2, and 8.x prior to 8.2.6, where a crafted image triggers an incorrect pointer calculation, lea...

CVE-2011-0587

Adobe Reader/Acrobat X 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Windows or macOS contains a cross-site scripting (XSS) vulnerability. The issue allows a remote attacker to inject arbitrary web script or HTML via unspecified vectors in the viewer. The vulnerability is describe...

CVE-2012-4160

Technical details for CVE-2012-4160 (affected product, root cause, impact, and fixes) are not provided in the supplied documents. Please monitor for updates from connected sources.

CVE-2013-0615

Technical details for CVE-2013-0615 are not publicly provided in the connected documents. The Initial Description contains general vulnerability info, but no product/version-specific root cause, impact, or remediation details within the supplied materials. Monitor for updates.

CVE-2013-0616

Technical details about CVE-2013-0616 are not publicly available in the provided Connected documents; the initial entry lists affected products and generic impact. Monitor for updates.

CVE-2013-0619

Technical details about CVE-2013-0619 are not publicly provided in the supplied connected documents. The initial entry notes arbitrary code execution/DoS via unspecified vectors, but no additional technical specifics, affected products, or remediation are confirmed here. Monitor for updates.

CVE-2013-3354

Adobe Reader and Acrobat are affected on Windows and macOS by a memory corruption vulnerability in which parsing a corrupted PDF file can lead to remote code execution. Affected products are before 10.1.8 and 11.x prior to 11.0.04. Root cause: incorrect memory buffer allocation during PDF parsing...

CVE-2014-8454

Adobe Acrobat/Reader (Windows and macOS) contains a use-after-free vulnerability tracked as CVE-2014-8454 that affects the 10.x branch before 10.1.13 and the 11.x branch before 11.0.10. The issue is in memory object handling, allowing arbitrary code execution when a user opens a crafted PDF/file,...

CVE-2015-5586

Technical details for CVE-2015-5586 are not publicly available in the provided documents. No explicit information on affected products, root cause, impact, or remediation is given. Monitor for updates.

CVE-2016-0942

Technical details for CVE-2016-0942 are not publicly available in the provided documents; monitor for updates from Adobe advisories and related sources.

CVE-2016-0945

Technical details for CVE-2016-0945 are not publicly provided in the connected documents. Monitor for updates from Adobe advisories and security bulletins.

CVE-2016-1041

Technical details for CVE-2016-1041 are not publicly provided in the supplied documents; no affected products, impact, or remediation details are included. Monitor for updates.

CVE-2016-1049

This CVE-2016-1051 is referenced in Debian DLA-1161-1 for a Redis security update. The bulletin describes a Cross Protocol Scripting issue where certain HTTP-like strings could be mishandled by Redis, potentially enabling craftable input to affect processing. Debian patched Redis in the Wheezy br...

CVE-2016-4093

Technical details for CVE-2016-4093 are not publicly available in the provided documents. Monitor for updates.

CVE-2016-4215

CVE-2016-4215 affects Adobe Reader and Acrobat products on Windows and macOS, enabling bypass of JavaScript API execution restrictions. Affected are: Reader/Acrobat before 11.0.17, DC Classic before 15.006.30198, and DC Continuous before 15.017.20050. The Vector(s) are unspecified in the provided...

CVE-2017-16376

Technical details about CVE-2017-16376 are not publicly available in the provided connected documents; monitor for updates.

CVE-2017-2943

CVE-2017-2943 affects Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, and 11.0.18 and earlier. It is a memory corruption vulnerability triggered when processing TIFF image tags, with successful exploitation potentially leading to arbitrary code execution. The pro...

CVE-2017-2958

CVE-2017-2958 affects Adobe Acrobat/Reader. The connected sources confirm an exploitable use-after-free in the JavaScript engine present in versions 15.020.20042 and earlier, 15.006.30244 and earlier, and 11.0.18 and earlier, enabling arbitrary code execution on successful exploitation. The issue...

CVE-2017-2967

CVE-2017-2967 describes an exploitable memory corruption vulnerability in the XFA engine of Adobe Acrobat/Reader. Affects Adobe Reader/Acrobat versions 15.020.20042 and earlier, 15.006.30244 and earlier, and 11.0.18 and earlier; exploitation could lead to arbitrary code execution. Root cause: mem...

CVE-2017-2970

CVE-2017-2970 refers to an exploitable heap overflow in the XSLT engine of Adobe Acrobat Reader/Reader DC, related to template manipulation. Affected versions include: 15.020.20042 and earlier, 15.006.30244 and earlier, and 11.0.18 and earlier. The confirmed impact is arbitrary code execution if ...

CVE-2017-2971

CVE-2017-2971 affects Adobe Acrobat Reader and Acrobat (Windows/macOS) with versions 15.020.20042 and earlier, 15.006.30244 and earlier, and 11.0.18 and earlier. The issue is an exploitable heap overflow in the JPEG decoder routine, which could allow arbitrary code execution on successful exploit...

CVE-2017-3043

Adobe Acrobat Reader (Windows/macOS) versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier are affected by a memory address leak in the collaboration feature (CVE-2017-3043). The connected sources confirm the same CVE entry is associated with these builds; no exploitati...

CVE-2017-3124

Technical details for CVE-2017-3124 are not publicly provided in the connected documents. Monitor vendor advisories and security trackers for updates and fixes.

CVE-2018-4899

CVE-2018-4899 affects Adobe Acrobat Reader and related builds (e.g., 2018.009.20050 and earlier; 2017.011.30070 and earlier; 2015.006.30394 and earlier). The issue arises from computing on data past the end of the target buffer during initial XPS page processing, enabling sensitive data exposure....

CVE-2021-28558

CVE-2021-28558 affects Adobe Acrobat Reader DC: heap-based buffer overflow in the PDFLibTool component. Affected versions include 2021.001.20150 and earlier, 2020.001.30020 and earlier, and 2017.011.30194 and earlier. The issue could allow arbitrary code execution in the context of the current us...