1414 matches found
CVE-2013-3338
CVE-2013-3346 affects Adobe Reader and Acrobat: versions 9.x prior to 9.5.5, 10.x prior to 10.1.7, and 11.x prior to 11.0.03 are vulnerable. The vulnerability allows arbitrary code execution or a denial of service (memory corruption) via unspecified vectors and is described as different from othe...
CVE-2013-3341
Adobe Reader and Acrobat are affected by CVE-2013-3341: multiple versions (9.x before 9.5.5, 10.x before 10.1.7, 11.x before 11.0.03) permit memory-corruption-based exploits leading to arbitrary code execution or denial of service via unspecified vectors. The connected advisories indicate remedia...
CVE-2013-2720
CVE-2013-3346 affects Adobe Reader/Acrobat: versions 9.x before 9.5.5, 10.x before 10.1.7, and 11.x before 11.0.03. The vulnerability enables memory corruption via unspecified vectors, potentially allowing arbitrary code execution or a denial of service. Root cause is memory corruption within com...
CVE-2013-2725
Adobe Reader/Acrobat is affected by CVE-2013-3346 (and related CVEs) where versions 9.x before 9.5.5, 10.x before 10.1.7, and 11.x before 11.0.03 can be exploited to run arbitrary code or cause memory-corruption-based DoS via unspecified vectors. Root cause is memory corruption in the PDF renderi...
CVE-2013-3340
CVE-2013-3346 affects Adobe Reader/Acrobat 9.x (before 9.5.5), 10.x (before 10.1.7), and 11.x (before 11.0.03). The vulnerability is described as memory corruption that allows attackers to execute arbitrary code or cause a denial of service via unspecified vectors, and it is noted as a different ...
CVE-2013-2736
CVE-2013-3346 affects Adobe Reader and Acrobat 9.x before 9.5.5, 10.x before 10.1.7, and 11.x before 11.0.03. The vulnerability allows attackers to execute arbitrary code or cause memory corruption via unspecified vectors, as a distinct issue from CVE-2013-2718/2719/2720/2721/2722/2723/2725/2726/...
CVE-2024-49535
CVE-2024-49535 : Acrobat Reader versions including 24.005.20307, 24.001.30213, 24.001.30193, 20.005.30730, 20.005.30710 and earlier are affected by an XML External Entity (XXE) vulnerability due to an improper restriction. The issue could allow an attacker to provide malicious XML input containin...
CVE-2010-2862
An integer overflow vulnerability in CoolType.dll affects Adobe Reader (versions 8.2.3 and 9.3.3) and Acrobat (version 9.3.3). A remote attacker can exploit this by providing a TrueType font containing a large maxCompositePoints value in the Maximum Profile (maxp) table , leading to arbitrary cod...
CVE-2011-0596
Adobe Reader/Acrobat is affected by CVE-2011-0596 due to a heap-based buffer overflow in the bitmap parsing component (RLE_8) of 2d.dll. Affected versions include Windows and macOS: Acrobat/Reader 10.x prior to 10.0.1, 9.x prior to 9.4.2, and 8.x prior to 8.2.6. Exploitation would require process...
CVE-2013-2722
CVE-2013-3346 affects Adobe Reader and Acrobat, with memory corruption that could allow arbitrary code execution or cause a denial of service via unspecified vectors. The vulnerability is described as distinct from other CVEs in the same family, and is associated with the same affected product fa...
CVE-2022-24103
CVE-2022-24103 is a use-after-free vulnerability in Acrobat Reader DC affecting versions 20.001.20085 and earlier, 20.005.3031x and earlier, and 17.012.30205 and earlier. The issue can lead to arbitrary code execution in the user’s context and requires user interaction (victim opens a malicious f...
CVE-2011-0593
CVE-2011-0593 affects Adobe Reader and Acrobat: in Windows and macOS, the following versions are vulnerable to remote code execution via a crafted Universal 3D (U3D) file that triggers a buffer overflow during decompression. Affected: Acrobat/Reader 10.x before 10.0.1, 9.x before 9.4.2, and 8.x b...
CVE-2013-2723
The CVE-2013-2723 entry affects Adobe Reader/Acrobat 9.x up to 9.5.4, 10.x up to 10.1.6, and 11.x up to 11.0.02, with memory-corruption based arbitrary-code/DoS impact via unspecified vectors. Connected advisories confirm multiple vulnerabilities in Adobe Reader, and remediation guidance from GLS...
CVE-2022-28837
CVE-2022-28837 affects Adobe Acrobat Pro DC: use-after-free in Doc buttonSetIcon handling leading to possible memory disclosure and ASLR bypass. Affected: Acrobat Pro DC 22.001.2011x and earlier, 20.005.3033x and earlier, 17.012.3022x and earlier. Exploitation requires user interaction (open a ma...
CVE-2024-49531
CVE-2024-49531 affects Adobe Acrobat Reader: specific vulnerable versions include 24.005.20307, 24.001.30213, 24.001.30193, 20.005.30730, 20.005.30710 and earlier. Root cause is a NULL Pointer Dereference that can crash the app, causing a denial-of-service. Exploitation requires user interaction ...
CVE-2012-4159
Technical details for CVE-2012-4159 are not provided in the supplied documents; no affected products, impact, or remediation are disclosed here. Monitor for updates.
CVE-2009-3459
CVE-2009-3459 is a heap-based buffer overflow in Adobe Reader and Acrobat prior to versions 7.1.4 (7.x), 8.x prior to 8.1.7, and 9.x prior to 9.2, allowing remote code execution via a crafted PDF. The issue can corrupt memory and was exploited in the wild during Oct 2009. Affected products are Ad...
CVE-2011-0590
CVE-2011-0590 impacts Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Windows and macOS. Affects via a crafted 3D file enabling remote code execution. Remediation mentioned in the document: apply updates to 10.0.1, 9.4.2, or 8.2.6 respectively.
CVE-2012-4157
Technical details for CVE-2012-4157 are not publicly available in the provided documents; the initial description only notes memory corruption and unspecified vectors for Adobe Reader/Acrobat 9.x and 10.x prior to listed versions. Monitor for updates.
CVE-2012-4155
Technical details for CVE-2012-4155 are not provided in the supplied documents. The connected EUVD entries reference malware unrelated to this CVE; monitor for updates.
CVE-2026-34622
Acrobat Reader is affected by a Prototype Pollution vulnerability (Improperly Controlled Modification of Object Prototype Attributes, CWE-1321). Affected versions include 26.001.21411, 24.001.30360, 24.001.30362 and earlier. The issue could allow arbitrary code execution in the context of the cur...
CVE-2021-28565
CVE-2021-28565 affects Adobe Acrobat family (Reader DC, Acrobat DC/Classic) with Out-of-bounds Read in PDFLibTool. Affected: Acrobat Reader DC 2017.011.30194 and earlier; 2020.001.30020 and earlier; 2021.001.20150 and earlier (and related Acrobat DC/Classic lines). Exploitation could lead to arbi...
CVE-2010-3654
Adobe Flash Player and Adobe Reader/Acrobat 9.x through 9.4 are vulnerable to remote code execution or denial of service due to a failure to properly parse Flash content inside PDF files. Affected versions include Adobe Flash Player before 9.0.289.0 and 10.x before 10.1.102.64, as well as authpla...
CVE-2022-27792
CVE-2022-27792 is an out-of-bounds write vulnerability in font parsing that could enable arbitrary code execution under the current user. Affected products include Acrobat Reader DC and older Acrobat/Reader tiers, with exploitation requiring a user to open a malicious file. The issue is supported...
CVE-2011-0599
CVE-2011-0599 affects Adobe Reader/Acrobat: the Bitmap parsing component in rt3d.dll allows remote code execution via a crafted image that triggers an invalid pointer calculation in 4/8-bit RLE compression. Affected installations are Adobe Reader/Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and ...
CVE-2012-0774
Adobe Reader/Acrobat is affected by CVE-2012-0774 due to an integer overflow in the parsing of TrueType fonts. This allows remote code execution when a user opens a crafted PDF. Affected products include Adobe Reader/Acrobat 9.x before 9.5.1 and 10.x before 10.1.3. The issue is tied to the font h...
CVE-2012-0775
Adobe Acrobat/Reader 9.x before 9.5.1 and 10.x before 10.1.3 contains a vulnerability in the JavaScript implementation that can lead to arbitrary code execution or memory corruption via unspecified vectors. The risk is described as high; exploit details are not provided in the documents. remediat...
CVE-2012-4148
CVE-2012-4148 affects Adobe Reader and Acrobat: versions 9.x prior to 9.5.2 and 10.x prior to 10.1.4 on Windows and macOS are vulnerable. The issue allows attackers to execute arbitrary code or cause a denial of service via memory corruption through unspecified vectors (distinct from CVE-2012-205...
CVE-2013-3358
CVE-2013-3358 affects Adobe Reader and Adobe Acrobat (Windows and macOS). The issue is an integer overflow in the applications prior to versions 10.1.8 (Reader) and 11.x prior to 11.0.04, which could allow arbitrary code execution via unspecified vectors. The vulnerability is addressed by Adobe A...
CVE-2024-41869
Adobe Acrobat Reader is affected by a Use After Free vulnerability (CWE-416) in versions 24.002.21005, 24.001.30159, 20.005.30655, 24.003.20054, and earlier. This flaw could allow an attacker to achieve arbitrary code execution in the context of the current user by opening a specially crafted mal...
CVE-2011-0592
Technical details for CVE-2011-0592 are not publicly available in the provided documents; monitor for updates.
CVE-2023-44372
CVE-2023-44372 affects Adobe Acrobat Reader versions 23.006.20360 and earlier, and 20.005.30524 and earlier. It is a Use-After-Free vulnerability that could lead to arbitrary code execution in the current user context. Exploitation requires user interaction (victim must open a malicious file). Re...
CVE-2022-24092
CVE-2022-24092 affects Adobe Acrobat Reader DC versions 21.007.20099 and earlier, 20.004.30017 and earlier, and 17.011.30204 and earlier. It is a font-parsing out-of-bounds write vulnerability that could lead to arbitrary code execution in the user’s context. exploitation requires user interactio...
CVE-2011-4372
Summary: CVE-2011-4372 concerns Adobe Reader/Acrobat on Windows and macOS, with memory corruption potentially leading to arbitrary code execution or denial of service. The Connected documents corroborate that multiple Adobe Reader vulnerabilities existed in the 9.x series, including CVE-2012-0774...
CVE-2012-2050
CVE-2012-2050 is a buffer overflow in Adobe Reader and Acrobat 9.x (<9.5.2) and 10.x (
CVE-2024-34122
CVE-2024-34122 affects Acrobat for Edge (Edge Chromium-based) up to version 126.0.2592.68, with an out-of-bounds read when parsing a crafted file that could allow code execution under the user’s context after user interaction. The issue is confirmed across multiple sources; a remediation exists a...
CVE-2023-21586
CVE-2023-21586 — Adobe Acrobat Reader : NULL pointer dereference vulnerability affecting versions 22.003.20282 and earlier, 22.003.20281 and earlier, and 20.005.30418 and earlier. An unauthenticated attacker could cause an application denial-of-service, with exploit requiring user interaction (vi...
CVE-2009-1857
Adobe Reader/Acrobat affected: Reader 7 and Acrobat 7 before 7.1.3; Reader 8 and Acrobat 8 before 8.1.6; Reader 9 and Acrobat 9 before 9.1.2. Root cause: memory corruption via a crafted TrueType font in a PDF document. Impact: denial of service or possible arbitrary code execution. Remediation: u...
CVE-2011-0591
CVE-2011-0591 affects Adobe Reader and Acrobat on Windows and macOS across multiple branches (8.x up to 8.2.6, 9.x up to 9.4.2, 10.x up to 10.0.1). The vulnerability arises from a buffer overflow during decompression of a crafted Universal 3D (U3D) file, specifically involving Texture and rgba ha...
CVE-2024-30279
CVE-2024-30279 affects Adobe Acrobat Reader DC/Classic installations (e.g., 20.005.30574, 24.002.20736 and earlier). The issue is an out-of-bounds write that could allow arbitrary code execution in the user’s context, with exploitation requiring user interaction (the victim opening a malicious fi...
CVE-2024-49532
CVE-2024-49532 affects Adobe Acrobat Reader (DC/Continuous/Classic) across multiple builds (e.g., 24.005.20307, 24.001.30213, 24.001.30193, 20.005.30730, 20.005.30710 and earlier). The issue is an out-of-bounds read that could disclose sensitive memory and potentially bypass ASLR; exploitation re...
CVE-2009-1861
CVE-2009-1861 is a heap-based memory corruption vulnerability in JBIG2/JBIG2-related processing within Adobe Reader/Acrobat products. A crafted PDF with a JPX (JPEG2000) stream could trigger heap memory corruption, potentially allowing code execution or a crash. Affected products include Adobe Re...
CVE-2011-4374
Adobe Reader for Linux (9.x) contains an integer overflow in versions prior to 9.4.6 that could allow arbitrary code execution via unspecified vectors. The vulnerability is CVE-2011-4374. Connected advisories indicate a fix to 9.4.6 available via APSB11-24 (Adobe), and Red Hat RHSA-2011:1434 docu...
CVE-2012-4150
Technical details (affected product/versions, exploit vectors, remediation) are not publicly provided in the supplied documents. Monitor for updates from Adobe/NVD; CVE-2012-4150 is listed among related CVEs without concrete specifics in these sources.
CVE-2022-34237
CVE-2022-34237 affects Adobe Acrobat Reader DC/Acrobat Reader versions such as 22.001.20142 (and earlier), 20.005.30334 (and earlier), and 17.012.30229 (and earlier). Root cause: Use-After-Free in a component handling memory, leading to potential disclosure of sensitive memory and bypass of ASLR....
CVE-2012-4149
CVE-2012-4149 affects Adobe Reader and Acrobat prior to 9.5.2 (9.x) and 10.x prior to 10.1.4 on Windows and macOS. The vulnerability allows arbitrary code execution or memory corruption through unspecified vectors, distinct from other CVEs in the same family. The connected documents corroborate a...
CVE-2012-4152
CVE-2012-4152 affects Adobe Reader and Acrobat 9.x (prior to 9.5.2) and 10.x (prior to 10.1.4) on Windows and macOS. The vulnerability is described as memory corruption that could allow arbitrary code execution or cause a denial of service via unspecified vectors. The public documentation clearly...
CVE-2013-5325
Summary of CVE-2013-5325 (Adobe Reader/Acrobat RCE) : The issue affects Adobe Reader and Acrobat 11.x on Windows prior to 11.0.05 , where a crafted PDF can cause a remote attacker to execute arbitrary JavaScript code via a javascript: URL. The underlying impact is remote code execution with full ...
CVE-2012-2049
CVE-2012-2049 affects Adobe Reader and Acrobat. A stack-based buffer overflow in the PDF processing path (notably related to U3D texture parsing) in Adobe Reader/Acrobat 9.x prior to 9.5.2 and 10.x prior to 10.1.4 on Windows and macOS allows remote code execution via crafted PDF content or vector...