CVE-2013-2736

CVE-2013-3346 affects Adobe Reader and Acrobat 9.x before 9.5.5, 10.x before 10.1.7, and 11.x before 11.0.03. The vulnerability allows attackers to execute arbitrary code or cause memory corruption via unspecified vectors, as a distinct issue from CVE-2013-2718/2719/2720/2721/2722/2723/2725/2726/...

CVE-2022-24104

CVE-2022-24104 is a use-after-free vulnerability in Adobe Acrobat Reader DC affecting versions 20.001.20085 and earlier, 20.005.3031x and earlier, and 17.012.30205 and earlier. The flaw could allow arbitrary code execution in the context of the current user and exploitation requires user interact...

CVE-2013-2722

CVE-2013-3346 affects Adobe Reader and Acrobat, with memory corruption that could allow arbitrary code execution or cause a denial of service via unspecified vectors. The vulnerability is described as distinct from other CVEs in the same family, and is associated with the same affected product fa...

CVE-2012-4159

Technical details for CVE-2012-4159 are not provided in the supplied documents; no affected products, impact, or remediation are disclosed here. Monitor for updates.

CVE-2013-3341

Adobe Reader and Acrobat are affected by CVE-2013-3341: multiple versions (9.x before 9.5.5, 10.x before 10.1.7, 11.x before 11.0.03) permit memory-corruption-based exploits leading to arbitrary code execution or denial of service via unspecified vectors. The connected advisories indicate remedia...

CVE-2022-27788

The CVE-2022-27788 entry describes an out-of-bounds write in Adobe Acrobat Reader DC affecting versions 22.001.20085 and earlier, 20.005.3031x and earlier, and 17.012.30205 and earlier, enabling arbitrary code execution in the context of the current user. Exploitation requires user interaction; a...

CVE-2013-2725

Adobe Reader/Acrobat is affected by CVE-2013-3346 (and related CVEs) where versions 9.x before 9.5.5, 10.x before 10.1.7, and 11.x before 11.0.03 can be exploited to run arbitrary code or cause memory-corruption-based DoS via unspecified vectors. Root cause is memory corruption in the PDF renderi...

CVE-2013-3353

CVE-2013-3353 is a buffer-overflow vulnerability in Adobe Reader and Acrobat on Windows and macOS. Affected versions are Acrobat/Reader before 10.1.8 and before 11.0.04, respectively. The root cause is a buffer overflow that allows remote arbitrary-code execution via unspecified vectors. Adobe is...

CVE-2024-49535

CVE-2024-49535 : Acrobat Reader versions including 24.005.20307, 24.001.30213, 24.001.30193, 20.005.30730, 20.005.30710 and earlier are affected by an XML External Entity (XXE) vulnerability due to an improper restriction. The issue could allow an attacker to provide malicious XML input containin...

CVE-2010-2862

CVE-2010-2862 – Adobe Reader/Acrobat (CoolType.dll) Integer Overflow : A flaw in CoolType.dll allows remote code execution via a specially crafted TrueType font with a large maxCompositePoints in the maxp table. Affected products include Adobe Reader 8.2.3 and 9.3.3, and Acrobat 9.3.3. The root c...

CVE-2011-0596

Adobe Reader/Acrobat is affected by CVE-2011-0596 due to a heap-based buffer overflow in the bitmap parsing component (RLE_8) of 2d.dll. Affected versions include Windows and macOS: Acrobat/Reader 10.x prior to 10.0.1, 9.x prior to 9.4.2, and 8.x prior to 8.2.6. Exploitation would require process...

CVE-2013-2723

The CVE-2013-2723 entry affects Adobe Reader/Acrobat 9.x up to 9.5.4, 10.x up to 10.1.6, and 11.x up to 11.0.02, with memory-corruption based arbitrary-code/DoS impact via unspecified vectors. Connected advisories confirm multiple vulnerabilities in Adobe Reader, and remediation guidance from GLS...

CVE-2022-24103

CVE-2022-24103 is a use-after-free vulnerability in Acrobat Reader DC affecting versions 20.001.20085 and earlier, 20.005.3031x and earlier, and 17.012.30205 and earlier. The issue can lead to arbitrary code execution in the user’s context and requires user interaction (victim opens a malicious f...

CVE-2024-49531

CVE-2024-49531 affects Adobe Acrobat Reader: specific vulnerable versions include 24.005.20307, 24.001.30213, 24.001.30193, 20.005.30730, 20.005.30710 and earlier. Root cause is a NULL Pointer Dereference that can crash the app, causing a denial-of-service. Exploitation requires user interaction ...

CVE-2022-28837

CVE-2022-28837 affects Adobe Acrobat Pro DC: use-after-free in Doc buttonSetIcon handling leading to possible memory disclosure and ASLR bypass. Affected: Acrobat Pro DC 22.001.2011x and earlier, 20.005.3033x and earlier, 17.012.3022x and earlier. Exploitation requires user interaction (open a ma...

CVE-2009-3459

CVE-2009-3459 is a heap-based buffer overflow in Adobe Reader and Acrobat prior to versions 7.1.4 (7.x), 8.x prior to 8.1.7, and 9.x prior to 9.2, allowing remote code execution via a crafted PDF. The issue can corrupt memory and was exploited in the wild during Oct 2009. Affected products are Ad...

CVE-2011-0593

CVE-2011-0593 affects Adobe Reader and Acrobat: in Windows and macOS, the following versions are vulnerable to remote code execution via a crafted Universal 3D (U3D) file that triggers a buffer overflow during decompression. Affected: Acrobat/Reader 10.x before 10.0.1, 9.x before 9.4.2, and 8.x b...

CVE-2012-4157

Technical details for CVE-2012-4157 are not publicly available in the provided documents; the initial description only notes memory corruption and unspecified vectors for Adobe Reader/Acrobat 9.x and 10.x prior to listed versions. Monitor for updates.

CVE-2011-0590

CVE-2011-0590 impacts Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Windows and macOS. Affects via a crafted 3D file enabling remote code execution. Remediation mentioned in the document: apply updates to 10.0.1, 9.4.2, or 8.2.6 respectively.

CVE-2012-4155

Technical details for CVE-2012-4155 are not provided in the supplied documents. The connected EUVD entries reference malware unrelated to this CVE; monitor for updates.

CVE-2012-4148

CVE-2012-4148 affects Adobe Reader and Acrobat: versions 9.x prior to 9.5.2 and 10.x prior to 10.1.4 on Windows and macOS are vulnerable. The issue allows attackers to execute arbitrary code or cause a denial of service via memory corruption through unspecified vectors (distinct from CVE-2012-205...

CVE-2012-0775

Adobe Acrobat/Reader 9.x before 9.5.1 and 10.x before 10.1.3 contains a vulnerability in the JavaScript implementation that can lead to arbitrary code execution or memory corruption via unspecified vectors. The risk is described as high; exploit details are not provided in the documents. remediat...

CVE-2012-0774

Adobe Reader/Acrobat is affected by CVE-2012-0774 due to an integer overflow in the parsing of TrueType fonts. This allows remote code execution when a user opens a crafted PDF. Affected products include Adobe Reader/Acrobat 9.x before 9.5.1 and 10.x before 10.1.3. The issue is tied to the font h...

CVE-2013-3358

CVE-2013-3358 affects Adobe Reader and Adobe Acrobat (Windows and macOS). The issue is an integer overflow in the applications prior to versions 10.1.8 (Reader) and 11.x prior to 11.0.04, which could allow arbitrary code execution via unspecified vectors. The vulnerability is addressed by Adobe A...

CVE-2011-0599

CVE-2011-0599 affects Adobe Reader/Acrobat: the Bitmap parsing component in rt3d.dll allows remote code execution via a crafted image that triggers an invalid pointer calculation in 4/8-bit RLE compression. Affected installations are Adobe Reader/Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and ...

CVE-2012-2050

CVE-2012-2050 is a buffer overflow in Adobe Reader and Acrobat 9.x (<9.5.2) and 10.x (

CVE-2012-4150

Technical details (affected product/versions, exploit vectors, remediation) are not publicly provided in the supplied documents. Monitor for updates from Adobe/NVD; CVE-2012-4150 is listed among related CVEs without concrete specifics in these sources.

CVE-2022-24092

CVE-2022-24092 affects Adobe Acrobat Reader DC versions 21.007.20099 and earlier, 20.004.30017 and earlier, and 17.011.30204 and earlier. It is a font-parsing out-of-bounds write vulnerability that could lead to arbitrary code execution in the user’s context. exploitation requires user interactio...

CVE-2023-44372

CVE-2023-44372 affects Adobe Acrobat Reader versions 23.006.20360 and earlier, and 20.005.30524 and earlier. It is a Use-After-Free vulnerability that could lead to arbitrary code execution in the current user context. Exploitation requires user interaction (victim must open a malicious file). Re...

CVE-2011-0591

CVE-2011-0591 affects Adobe Reader and Acrobat on Windows and macOS across multiple branches (8.x up to 8.2.6, 9.x up to 9.4.2, 10.x up to 10.0.1). The vulnerability arises from a buffer overflow during decompression of a crafted Universal 3D (U3D) file, specifically involving Texture and rgba ha...

CVE-2011-4372

Summary: CVE-2011-4372 concerns Adobe Reader/Acrobat on Windows and macOS, with memory corruption potentially leading to arbitrary code execution or denial of service. The Connected documents corroborate that multiple Adobe Reader vulnerabilities existed in the 9.x series, including CVE-2012-0774...

CVE-2021-28565

CVE-2021-28565 affects Adobe Acrobat family (Reader DC, Acrobat DC/Classic) with Out-of-bounds Read in PDFLibTool. Affected: Acrobat Reader DC 2017.011.30194 and earlier; 2020.001.30020 and earlier; 2021.001.20150 and earlier (and related Acrobat DC/Classic lines). Exploitation could lead to arbi...

CVE-2009-1861

CVE-2009-1861 is a heap-based memory corruption vulnerability in JBIG2/JBIG2-related processing within Adobe Reader/Acrobat products. A crafted PDF with a JPX (JPEG2000) stream could trigger heap memory corruption, potentially allowing code execution or a crash. Affected products include Adobe Re...

CVE-2012-4152

CVE-2012-4152 affects Adobe Reader and Acrobat 9.x (prior to 9.5.2) and 10.x (prior to 10.1.4) on Windows and macOS. The vulnerability is described as memory corruption that could allow arbitrary code execution or cause a denial of service via unspecified vectors. The public documentation clearly...

CVE-2009-1857

Adobe Reader/Acrobat affected: Reader 7 and Acrobat 7 before 7.1.3; Reader 8 and Acrobat 8 before 8.1.6; Reader 9 and Acrobat 9 before 9.1.2. Root cause: memory corruption via a crafted TrueType font in a PDF document. Impact: denial of service or possible arbitrary code execution. Remediation: u...

CVE-2011-4374

Adobe Reader for Linux (9.x) contains an integer overflow in versions prior to 9.4.6 that could allow arbitrary code execution via unspecified vectors. The vulnerability is CVE-2011-4374. Connected advisories indicate a fix to 9.4.6 available via APSB11-24 (Adobe), and Red Hat RHSA-2011:1434 docu...

CVE-2012-4149

CVE-2012-4149 affects Adobe Reader and Acrobat prior to 9.5.2 (9.x) and 10.x prior to 10.1.4 on Windows and macOS. The vulnerability allows arbitrary code execution or memory corruption through unspecified vectors, distinct from other CVEs in the same family. The connected documents corroborate a...

CVE-2024-30279

CVE-2024-30279 affects Adobe Acrobat Reader DC/Classic installations (e.g., 20.005.30574, 24.002.20736 and earlier). The issue is an out-of-bounds write that could allow arbitrary code execution in the user’s context, with exploitation requiring user interaction (the victim opening a malicious fi...

CVE-2026-34622

Acrobat Reader is affected by a Prototype Pollution vulnerability (Improperly Controlled Modification of Object Prototype Attributes, CWE-1321). Affected versions include 26.001.21411, 24.001.30360, 24.001.30362 and earlier. The issue could allow arbitrary code execution in the context of the cur...

CVE-2009-1859

CVE-2009-1859 affects Adobe Reader and Acrobat 7/8/9 lineages; root cause is memory corruption due to parsing the COD tag of an embedded JP2 image, enabling arbitrary code execution. Affected versions include Acrobat/Reader 7 up to 7.1.3, 8 up to 8.1.6, and 9 up to 9.1.2. Remediation patches exis...

CVE-2012-4151

CVE-2012-4151 affects Adobe Reader and Acrobat 9.x before 9.5.2 and 10.x before 10.1.4 on Windows and macOS; described as memory corruption allowing arbitrary code execution or DoS via unspecified vectors. Connected Nessus entries indicate patch not available from vendor for affected Linux distri...

CVE-2012-4154

Technical details for CVE-2012-4154 are not publicly available in the provided documents; monitor for updates.

CVE-2013-0622

Technical details for CVE-2013-0622 are not publicly provided in the supplied documents. Monitor for updates from vendor advisories and security feeds to learn affected products, impact, and remediation.

CVE-2015-5097

CVE-2015-5097 is an integer‑overflow vulnerability in Adobe Reader and Acrobat that can allow remote code execution via unspecified vectors when parsing TIFF content. Affected products include Adobe Reader/Acrobat 10.x before 10.1.15 and 11.x before 11.0.12, and DC Classic before 2015.006.30060 o...

CVE-2022-27792

CVE-2022-27792 is an out-of-bounds write vulnerability in font parsing that could enable arbitrary code execution under the current user. Affected products include Acrobat Reader DC and older Acrobat/Reader tiers, with exploitation requiring a user to open a malicious file. The issue is supported...

CVE-2024-41869

Adobe Acrobat/Reader across Windows, macOS, and related continuums (DC/Classic/Continuous) is affected by CVE-2024-41869 (Use-After-Free) and CVE-2024-45112 (Type Confusion), enabling arbitrary code execution in the context of the current user. Exploitation requires user interaction (opening a ma...

CVE-2012-1525

CVE-2012-1525 refers to a heap-based buffer overflow in Adobe Reader/Acrobat 9.x (pre-9.5.2) and 10.x (pre-10.1.4) on Windows and macOS. The flaw allows an attacker to execute arbitrary code via unspecified vectors, due to improper handling of input in the affected components. Public sources in t...

CVE-2023-21586

CVE-2023-21586 — Adobe Acrobat Reader : NULL pointer dereference vulnerability affecting versions 22.003.20282 and earlier, 22.003.20281 and earlier, and 20.005.30418 and earlier. An unauthenticated attacker could cause an application denial-of-service, with exploit requiring user interaction (vi...

CVE-2024-49532

CVE-2024-49532 affects Adobe Acrobat Reader (DC/Continuous/Classic) across multiple builds (e.g., 24.005.20307, 24.001.30213, 24.001.30193, 20.005.30730, 20.005.30710 and earlier). The issue is an out-of-bounds read that could disclose sensitive memory and potentially bypass ASLR; exploitation re...

CVE-2012-1530

CVE-2012-1530 : A heap-based buffer overflow in the XSLT engine of Adobe Reader and Acrobat allows code execution or memory corruption via a PDF containing a crafted XSL that triggers lang() processing on XML data. Affected products include Adobe Reader/Acrobat 9.x prior to 9.5.3, 10.x prior to 1...