CVE-2021-44714

CVE-2021-44714 affects Adobe Acrobat Reader DC (versions up to 21.007.20099, 20.004.30017, 17.011.30204, and earlier) and is a security feature bypass caused by a design flaw in the warning prompt shown when opening PDFs. The vulnerability allows a targeted user-attended mislead if the warning do...

CVE-2021-44742

CVE-2021-44742 affects Adobe Acrobat Reader DC (versions including 21.007.20099 and earlier; also listed as 20.004.30017 and 17.011.30204 and earlier). The issue is an out-of-bounds read during parsing of a crafted PDF, which could allow code execution in the context of the current user. Exploita...

CVE-2023-29303

Adobe Acrobat Reader (Windows/macOS) versions 23.003.20244 and earlier, and 20.005.30467 and earlier, are affected by a Use After Free vulnerability that could disclose memory and bypass ASLR. Exploitation requires user interaction (victim must open a malicious file). Remediation details (specifi...

CVE-2023-38227

Adobe Acrobat Reader is affected by a Use After Free vulnerability in versions 23.003.20244 and earlier, and 20.005.30467 and earlier. The issue could lead to arbitrary code execution in the context of the current user and requires user interaction (the user must open a malicious file). The avail...

CVE-2024-34098

CVE-2024-34098 affects Adobe Acrobat Reader DC/2020 lines: versions 20.005.30574 and 24.002.20736 (and earlier) with an Improper Input Validation flaw that could allow arbitrary code execution in the context of the current user. Exploitation requires user interaction (victim must open a malicious...

CVE-2024-41835

CVE-2024-41835 affects Acrobat Reader versions 20.005.30636, 24.002.20965, 24.002.20964, 24.001.30123 and earlier. The issue is an out-of-bounds read vulnerability that could disclose memory contents and help bypass mitigations such as ASLR. Exploitation requires user interaction (victim must ope...

CVE-2026-47911

Acrobat Reader has a CVE-2026-47911 out-of-bounds write vulnerability (CWE-787) affecting versions 24.001.30365, 26.001.21651 and earlier. Successful exploitation could allow arbitrary code execution in the current user context. Exploitation requires user interaction, with a victim opening a mali...

CVE-2007-5020

CVE-2007-5020 describes a remote code execution vulnerability in Adobe Acrobat/Reader 8.1 on Windows, triggered by opening a crafted PDF file related to the mailto: option and Internet Explorer 7 on Windows XP. Public details consistently reference a vulnerability in URI handling that allows arbi...

CVE-2009-2980

CVE-2009-2980 concerns an integer overflow in Adobe Reader/Acrobat across multiple lines of versions (7.x up to 7.1.4, 8.x up to 8.1.7, 9.x up to 9.2) that can lead to denial of service or potentially remote code execution via unspecified vectors. Publicly documented details show affected product...

CVE-2009-2993

CVE-2009-2993 affects Adobe Reader/Acrobat 7.x (before 7.1.4), 8.x (before 8.1.7), and 9.x (before 9.2). The vulnerability arises from improper enforcement of Privileged Context and Safe Path restrictions for unspecified JavaScript methods, enabling remote attackers to craft PDFs that set cPath t...

CVE-2009-2997

CVE-2009-2997 is an Adobe Reader/Acrobat U3D heap overflow vulnerability. Multiple SAINT records (e.g., C6D7B175C464FAAED01654B48ACA5121) describe a heap memory corruption due to an input validation error while parsing Universal 3D (U3D) files, specifically in the CLODMeshDeclaration block. Resol...

CVE-2010-2208

CVE-2010-2208 affects Adobe Reader/Acrobat 9.x before 9.3.3 and 8.x before 8.2.3 on Windows and macOS. The flaw is a heap object dereference after deletion, enabling arbitrary code execution via unspecified vectors. The provided sources document the affected versions and patch levels, with fixes ...

CVE-2011-2103

CVE-2011-2103 affects Adobe Reader and Acrobat on Windows and macOS, specifically 8.x before 8.3 . The issue is a memory corruption vulnerability (unspecified vectors) that can allow attackers to execute arbitrary code or cause a denial of service. Affected component: Reader/Acrobat 8.x, root cau...

CVE-2012-4158

CVE-2012-4158 affects Adobe Reader/Acrobat 9.x before 9.5.2 and 10.x before 10.1.4 on Windows and macOS. Causes arbitrary code execution or memory corruption-based denial of service via unspecified vectors. CVSSv2 base score 10 (HIGH) with Network attack vector, no authentication, and complete im...

CVE-2013-0601

CVE-2013-0601 affects Adobe Reader and Acrobat: 9.x before 9.5.3, 10.x before 10.1.5, and 11.x before 11.0.1. The vulnerability allows attackers to execute arbitrary code or cause a denial of service through memory corruption via unspecified vectors (distinct from CVE-2012-1530 etc.). The publish...

CVE-2014-5315

CVE-2014-5315 affects Adobe products via an XSS in the Help page. Affected: Adobe Acrobat <= 9.5.2 (Mac/Windows) and Adobe ColdFusion

CVE-2014-9161

Adobe Reader/Acrobat vulnerable to CVE-2014-9161: CoolType.dll contains an out-of-bounds read that can be triggered by a crafted PDF, potentially causing the application crash and other unspecified impact. Affected: Windows and OS X, versions covered by the initial description (pre-10.1.13 for 10...

CVE-2015-6684

Adobe Reader/Acrobat on Windows and macOS vulnerable to a use-after-free (CVE-2015-6684) that allows arbitrary code execution. Affected: Reader 10.x up to 10.1.16, Acrobat 11.x up to 11.0.13, and Classic/Continuous lines before 2015.006.30094 and 2015.009.20069, respectively. Root cause: use-afte...

CVE-2015-6724

Technical details for CVE-2015-6724 are not publicly available in the provided connected documents; monitor for updates.

CVE-2016-0947

CVE-2016-0947 is an untrusted search path vulnerability in Adobe Download Manager as used by Adobe Reader and Acrobat . Affected products include Windows and macOS versions: after older builds, specifically before 11.0.14 and before 15.006.30119 (Acrobat/Acrobat Reader DC Classic) and before 15.0...

CVE-2016-1051

There is a connected Debian security advisory that assigns CVE-2016-1051 to Redis (not Adobe). It describes a Cross Protocol Scripting flaw where POST and Host: strings (not valid Redis protocol) were not rejected when sent to the Redis TCP port. Impact per the advisory is classically cross-proto...

CVE-2016-1055

Technical details for CVE-2016-1055 are not provided in the connected documents. Public details appear unavailable here; monitor for updates.

CVE-2016-1072

Technical details for CVE-2016-1072 are not publicly available in the connected documents; no affected products, root cause, impact, or remediation are provided here. Monitor for updates.

CVE-2016-1074

Technical details about CVE-2016-1074 are not publicly provided in the supplied connected documents. Monitor for updates from official advisories.

CVE-2016-4192

Technical details about CVE-2016-4192 are not publicly available in the provided documents. Monitor for updates.

CVE-2016-4213

Technical details about CVE-2016-4213 are not publicly available in the provided documents. Monitor for updates.

CVE-2016-4214

Technical details (affected products, vulnerable components, root cause, impact, or fixes) are not publicly available in the provided connected documents. Monitor for updates from official advisories.

CVE-2016-4252

Technical details for CVE-2016-4252 are not publicly available in the provided connected documents; monitor for updates from security advisories.

CVE-2016-4254

Technical details about CVE-2016-4254 are not publicly available in the provided Connected documents. Monitor for updates from official advisories and vendors.

CVE-2016-6955

Technical details for CVE-2016-6955 are not provided in the connected documents. Available items include the general CVE description and EUVD entries mentioning malware; no concrete payloads, affected products, or fixes are disclosed. Monitor for updates.

CVE-2016-6959

Technical details for CVE-2016-6959 are not publicly available in the provided documents. No explicit affected products, root cause, or fixes are described here. Monitor for updates in the connected sources.

CVE-2016-6978

Technical details about CVE-2016-6978 are not provided in the submitted documents; no specifics on affected products, root cause, or fixes. Monitor for updates from official advisories.

CVE-2016-7013

CVE-2016-7013 affects Adobe Reader and Acrobat before 11.0.18, and Acrobat/Reader DC Classic before 15.006.30243, and DC Continuous before 15.020.20039 on Windows and OS X. The issue permits attackers to execute arbitrary code or cause memory corruption via unspecified vectors, belonging to a fam...

CVE-2017-11250

CVE-2017-11250 affects Adobe Acrobat and Reader, with out-of-bounds read vulnerabilities in versions such as 2017.012.20098 and earlier, 2017.011.30066 and earlier, 2015.006.30355 and earlier, and 11.0.22 and earlier. The vulnerability is exploitable and could allow arbitrary code execution in th...

CVE-2017-11257

Technical details for CVE-2017-11257 are not publicly available in the provided documents. Monitor for updates.

CVE-2017-16387

Technical details for CVE-2017-16387 are not publicly available in the provided documents. Monitor for updates.

CVE-2017-3010

Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, and 11.0.18 and earlier contain a memory corruption vulnerability in the rendering engine (CVE-2017-3010) that could allow arbitrary code execution on successful, remote exploitation. The provided documents do not i...

CVE-2017-3035

Adobe Acrobat Reader (affected: 11.0.19 and earlier; 15.006.30280 and earlier; 15.023.20070 and earlier) contains a use-after-free vulnerability in the XML Forms Architecture (XFA) engine (CVE-2017-3035). Exploitation could lead to arbitrary code execution. The connected documents acknowledge CVE...

CVE-2017-3047

CVE-2017-3047 affects Adobe Acrobat/Reader (versions 11.0.19 and earlier; 15.006.30280 and earlier; 15.023.20070 and earlier). Root cause: a use-after-free in the JavaScript engine’s annotation-related API, leading to arbitrary code execution. Impact is consistent with the advisory: potentially a...

CVE-2017-3119

CVE-2017-3119 affects Adobe Acrobat/Reader engines: vulnerable in Acrobat/Reader versions 11.0.19 and earlier, and in Acrobat/Reader 2017/2015 line revisions listed (2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier). Root cause is a memor...

CVE-2018-4911

CVE-2018-4911 affects Adobe Acrobat Reader (and related Acrobat products) with versions such as 2018.009.20050 and earlier, 2017.011.30070 and earlier, and 2015.006.30394 and earlier. The issue is a use-after-free in the JavaScript API related to bookmark functionality, triggered by crafted JavaS...

CVE-2021-39858

Acrobat Reader DC is affected by an out-of-bounds read vulnerability (CVE-2021-39858) that could disclose arbitrary memory when a user opens a crafted file. Affected products include Acrobat Reader DC versions 2021.005.20060 and earlier, 2020.004.30006 and earlier, and 2017.011.30199 and earlier....

CVE-2023-26422

Technical details about CVE-2023-26422 (affected Adobe Acrobat versions, root cause, impact, and fixes) are not publicly provided in the connected documents. Monitor for updates.

CVE-2009-2984

CVE-2009-2984 affects Adobe Acrobat/Reader: image decoder vulnerability in Adobe Acrobat 9.x prior to 9.2 (and possibly older 7.x, 8.x). Impact described as denial of service or possible arbitrary code execution via unknown vectors. Affects Acrobat/Reader components handling images; no exploit de...

CVE-2009-2991

Technical details about CVE-2009-2991 are not publicly provided in the supplied documents. Monitor for updates.

CVE-2011-0586

CVE-2011-0586 affects Adobe Reader and Acrobat prior to specific 10.x/9.x/8.x releases on Windows and macOS, where input validation is insufficient, allowing arbitrary code execution via unspecified/unknown vectors. Affected versions include: Windows/macOS users of Adobe Reader/Acrobat 10.x befor...

CVE-2013-0607

Technical details about CVE-2013-0607 are not provided in the connected documents. The supplied sources reference related advisories, but do not disclose affected products/components, root cause, or fixes. Monitor for updates.

CVE-2013-3352

CVE-2013-3354 affects Adobe Reader and Acrobat on Windows and Mac OS X. The vulnerability is a memory corruption issue (via unspecified vectors) that could allow arbitrary code execution or cause a denial of service. Impact is as described for the related family: affected products include those b...

CVE-2015-3059

Adobe Acrobat/Reader vulnerable to a use-after-free in memory handling that could allow arbitrary code execution through a crafted PDF. Affected products: Adobe Acrobat/Reader 10.x (before 10.1.14) and 11.x (before 11.0.11) on Windows and macOS. Root cause: use-after-free in object handling. Reme...

CVE-2015-4441

CVE-2015-4441 affects Adobe Reader/Acrobat and related DC apps on Windows and macOS. The issue permits bypassing JavaScript API execution restrictions via unspecified vectors in multiple versions listed (e.g., Acrobat/Reader 10.x up to 10.1.15 and 11.x up to 11.0.12; DC Classic before 2015.006.30...