CVE-2017-16382

Adobe Acrobat/Reader (versions 11.0.22 and earlier; 2015.006.30355 and earlier; 2017.011.30066 and earlier; 2017.012.20098 and earlier) is affected by an out-of-bounds read in the image conversion module caused by computing with a data pointer past the end of a buffer. The vulnerability allows se...

CVE-2017-16396

Technical details about CVE-2017-16396 (affected Adobe Acrobat/Reader TIFF processing buffer length issue) are not publicly disclosed in the provided documents. Monitor for updated advisories and vendor patches.

CVE-2017-2970

CVE-2017-2970 refers to an exploitable heap overflow in the XSLT engine of Adobe Acrobat Reader/Reader DC, related to template manipulation. Affected versions include: 15.020.20042 and earlier, 15.006.30244 and earlier, and 11.0.18 and earlier. The confirmed impact is arbitrary code execution if ...

CVE-2018-4894

CVE-2018-4894 affects Adobe Acrobat Reader versions 2018.009.20050 and earlier, 2017.011.30070 and earlier, and 2015.006.30394 and earlier. The issue arises from a computation during XPS font processing that reads data past the end of the target buffer, constituting a buffer overread. Reported im...

CVE-2018-4895

CVE-2018-4895 affects Adobe Acrobat Reader (versions including 2018.009.20050 and earlier; 2017.011.30070 and earlier; 2015.006.30394 and earlier) and relates to a buffer overrun in the image conversion engine while processing Enhanced Metafile Format Plus (EMF+) data. The root cause is data bein...

CVE-2021-28555

Acrobat Reader DC vulnerable to an Out-of-bounds Read in multiple versions (2021.001.20150 and earlier; 2020.001.30020 and earlier; 2017.011.30194 and earlier). An unauthenticated attacker could access sensitive data in the current user context by convincing a victim to open a malicious file; use...

CVE-2021-39850

CVE-2021-39850 refers to a Null pointer dereference in Adobe Acrobat Reader DC affecting versions 2021.005.20060 (and earlier), 2020.004.30006 (and earlier), and 2017.011.30199 (and earlier). The vulnerability allows an unauthenticated attacker to cause an application denial-of-service in the con...

CVE-2021-39856

CVE-2021-39856 affects Adobe Acrobat Reader DC ActiveX Control. The vulnerability allows an unauthenticated attacker to obtain NTLMv2 credentials via an information-disclosure flaw in the ActiveX component, with exploitation requiring a user to visit a malicious attacker-controlled webpage. Affec...

CVE-2023-26397

CVE-2023-26397 affects Adobe Acrobat Reader versions 23.001.20093 and 20.005.30441 (and earlier). The issue is an out-of-bounds read in a component that could disclose sensitive memory and bypass mitigations such as ASLR. Exploitation requires user interaction—an attacker must lure a user to open...

CVE-2023-26406

CVE-2023-26406 affects Adobe Acrobat Reader (versions 23.001.20093 and earlier; 20.005.30441 and earlier). The issue is an improper access control that could allow arbitrary code execution in the context of the current user. Exploitation requires user interaction: a victim must open a malicious f...

CVE-2023-38229

Adobe Acrobat Reader DC/Classic (Windows, macOS) versions 23.003.20244 and earlier, and 20.005.30467 and earlier, are affected by an out-of-bounds read that could lead to arbitrary code execution in the current user’s context. Exploitation requires user interaction (victim must open a malicious f...

CVE-2026-47911

Acrobat Reader has a CVE-2026-47911 out-of-bounds write vulnerability (CWE-787) affecting versions 24.001.30365, 26.001.21651 and earlier. Successful exploitation could allow arbitrary code execution in the current user context. Exploitation requires user interaction, with a victim opening a mali...

CVE-2004-0629

CVE-2004-0629 concerns a buffer overflow in the ActiveX component pdf.ocx used by Adobe Acrobat 5.0.5 and Acrobat Reader (and possibly other versions). The flaw allows remote code execution when processing a PDF URI that ends with a null terminator (%00) followed by a long string, exploiting the ...

CVE-2005-2470

CVE-2005-2470 describes a buffer overflow in Adobe Reader/Acrobat core plug-ins (affecting Adobe Reader 5.1–7.0.2 and Acrobat 5.0–7.0.2) that can cause a denial of service (crash) and may allow arbitrary code execution via unknown vectors. Public advisories from Red Hat (RHSA-2005:750) and others...

CVE-2007-0048

CVE-2007-0048 affects Adobe Acrobat Reader/Plugin when used with Internet Explorer, Chrome, or Opera. A crafted PDF URL containing a long sequence of # characters exploits a cross-site scripting issue to trigger memory exhaustion, causing a denial of service. Affected are the Acrobat/Reader plugi...

CVE-2009-0198

CVE-2009-0198 is a heap-based buffer overflow in the JBIG2 filter of Adobe Reader/Acrobat products. The issue allows memory corruption and potential remote code execution or denial of service when parsing a crafted PDF that contains JBIG2 text region segments with Huffman encoding. Affected: Adob...

CVE-2009-0889

CVE-2009-0889 describes a heap-based buffer overflow in the JBIG2 filter of Adobe Reader/Acrobat (versions affected: Reader 7/Acrobat 7 before 7.1.3, Reader 8/Acrobat 8 before 8.1.6, Reader 9 before 9.1.2) that could allow a remote attacker to execute arbitrary code via unspecified vectors. The i...

CVE-2009-1856

CVE-2009-1856 is tied to an integer overflow in the FlateDecode filter of Adobe Reader 7/ Acrobat 7 up to 7.1.3, Adobe Reader 8 up to 8.1.6, and Adobe Reader 9 up to 9.1.2. The vulnerability allows a heap-based buffer overflow via a PDF containing unspecified parameters, potentially causing a den...

CVE-2009-2983

CVE-2009-2983 affects Adobe Reader and Acrobat 9.x (pre-9.2), 8.x (pre-8.1.7), and possibly 7.x (through 7.1.4). The issue is a memory corruption vulnerability in the Adobe Reader/Acrobat plugin handling, exploited via unspecified vectors, leading to denial of service and potentially arbitrary co...

CVE-2009-2993

CVE-2009-2993 affects Adobe Reader/Acrobat 7.x (before 7.1.4), 8.x (before 8.1.7), and 9.x (before 9.2). The vulnerability arises from improper enforcement of Privileged Context and Safe Path restrictions for unspecified JavaScript methods, enabling remote attackers to craft PDFs that set cPath t...

CVE-2010-0202

CVE-2010-0202 is a buffer overflow vulnerability in Adobe Reader/Acrobat 9.x (before 9.3.2) and 8.x (before 8.2.2) on Windows and macOS, allowing arbitrary code execution via unspecified vectors. The vulnerability is part of a family involving CVEs 2010-0190..0204 and 2010-1241, with multiple ven...

CVE-2010-2888

Adobe Reader/Acrobat on Windows (8.x before 8.2.5; 9.x before 9.4) contains an ActiveX control vulnerability that allows arbitrary code execution via unspecified vectors. Root cause: multiple unspecified vulnerabilities in the ActiveX control. Impact: remote code execution with high severity. Rem...

CVE-2011-0565

Adobe Reader/Acrobat contains an unspecified vulnerability (CVE-2011-0565) affecting Adobe Reader/Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Windows and macOS, capable of causing denial of service or possibly arbitrary code execution via unknown vectors. The connected s...

CVE-2012-4156

CVE-2012-4156 affects Adobe Reader and Acrobat 9.x before 9.5.2 and 10.x before 10.1.4 on Windows and Mac OS X. The issue allows executing arbitrary code or causing a memory corruption denial of service via unspecified vectors (distinct from listed CVEs). The provided sources do not specify the r...

CVE-2015-6685

CVE-2015-6685 affects Adobe Reader/Acrobat product lines prior to the listed fixes: Adobe Reader/Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat/Reader DC Classic before 2015.006.30094, and Acrobat/Reader DC Continuous before 2015.009.20069 on Windows and macOS. The vulnerability all...

CVE-2015-6694

Technical details for CVE-2015-6694 are not provided in the supplied connected documents; no product/version specifics or exploit data are present. Monitor for updates from official advisories.

CVE-2015-6710

Technical details about CVE-2015-6710 are not publicly provided in the connected documents. No concrete affected products, versions, root cause, or remediation are stated here. Monitor for updates from official advisories for additional information.

CVE-2015-7624

Technical details (affected product versions, root cause, exploit vectors) are not publicly provided in the supplied documents. Monitor for updates.

CVE-2015-8458

CVE-2015-8458 is a heap-based buffer overflow in AGM.dll within Adobe Reader/Acrobat 10.x (pre-10.1.16) and 11.x (pre-11.0.13), plus Acrobat/Reader DC Classic pre-2015.006.30094 and Continuous pre-2015.009.20069, on Windows and macOS. The vulnerability is triggered by a malicious multi-layer PDF ...

CVE-2016-1066

Technical details for CVE-2016-1066 are not publicly available in the provided documents; connected items reference other CVEs but do not specify this one. Monitor for updates.

CVE-2016-1081

Technical details for CVE-2016-1081 are not publicly available in the provided documents; no affected products, root cause, or remediation are specified here. Monitor for updates.

CVE-2016-6940

Technical details about CVE-2016-6940 are not publicly available in the provided documents. The connected EUVD entries mention malware labels but do not specify affected products, versions, root cause, or remediation. Monitor for official updates.

CVE-2016-6951

Technical details about CVE-2016-6951 (affected software, root cause, impact, vulnerable versions, or fixes) are not provided in the connected documents. Monitor for updates from official advisories and security bulletins.

CVE-2016-6954

Technical details for CVE-2016-6954 are not publicly available in the provided documents. Monitor for updates from official advisories.

CVE-2016-6988

Public documents provided do not include technical details for CVE-2016-6988 beyond the high-level description. No affected products, components, impacts, or fixes are specified in the connected records. Monitor for official updates.

CVE-2017-11307

Adobe Acrobat and Adobe Reader are affected by CVE-2017-11307, an exploitable out-of-bounds read in this family of products (versions including 2017.012.20098 and earlier, 2017.011.30066 and earlier, 2015.006.30355 and earlier, and 11.0.22 and earlier). Successful exploitation could execute arbit...

CVE-2017-16389

Technical details for CVE-2017-16389 are not publicly provided in the supplied documents. Monitor for updates.

CVE-2017-16409

CVE-2017-16409 affects Adobe Acrobat and Reader, including multiple legacy builds. The issue arises from a computation that reads data past the end of a target buffer within the Adobe graphics module responsible for displaying text. Using an invalid (out-of-range) pointer offset during access of ...

CVE-2017-16412

Technical details for CVE-2017-16412 are not publicly available in the provided documents. Monitor for updates from official advisories; current sources do not specify affected products/versions or remediation beyond the general Adobe Acrobat/Reader vulnerability description.

CVE-2017-2955

Adobe Acrobat/Reader is affected by CVE-2017-2955, a use-after-free vulnerability in the JavaScript engine that could allow arbitrary code execution when rendering PDF content. Affected products include various versions of Adobe Acrobat Reader (e.g., 15.020.20042 and earlier, 15.006.30244 and ear...

CVE-2017-3117

CVE-2017-3117 affects Adobe Acrobat/Reader (2017 and earlier, across DC and classic tracks) with a heap overflow in the PDF link-handling plugin that could lead to arbitrary code execution. OpenVAS entries corroborate this CVE as part of the APSB17-24 update family addressing Adobe Acrobat/Reader...

CVE-2018-4880

CVE-2018-4880 affects Adobe Acrobat Reader/Acrobat versions: 2018.009.20050 and earlier, 2017.011.30070 and earlier, and 2015.006.30394 and earlier. Root cause is a computation that reads data past the end of the target buffer within the U3D data parsing in the conversion module; this can lead to...

CVE-2018-4911

CVE-2018-4911 affects Adobe Acrobat Reader (and related Acrobat products) with versions such as 2018.009.20050 and earlier, 2017.011.30070 and earlier, and 2015.006.30394 and earlier. The issue is a use-after-free in the JavaScript API related to bookmark functionality, triggered by crafted JavaS...

CVE-2020-24428

CVE-2020-24428 (Acrobat Reader DC for macOS) is a TOCTOU race condition affecting 2020.012.20048 and earlier, 2020.001.30005 and earlier, and 2017.011.30175 and earlier. It could lead to local privilege escalation; exploitation requires a user to open a malicious file. A fix is available under Ad...

CVE-2023-21611

CVE-2023-21611 affects Adobe Acrobat Reader versions 22.003.20282 and earlier, 22.003.20281 and earlier, and 20.005.30418 and earlier. The root cause is a Creation of Temporary File in Directory with Incorrect Permissions that could enable privilege escalation within the current user’s context. E...

CVE-2023-26396

CVE-2023-26396 affects Adobe Acrobat Reader Desktop (versions 23.001.20093 and earlier; 20.005.30441 and earlier). The issue is a Creation of Temporary File in Directory with Incorrect Permissions that could enable privilege escalation within the current user context. Exploitation requires user i...

CVE-2023-26420

CVE-2023-26420 affects Adobe Acrobat Reader versions 23.001.20093 and earlier, and 20.005.30441 and earlier. The vulnerability is a Use After Free that can lead to arbitrary code execution in the context of the current user. Exploitation requires user interaction: a victim must open a malicious f...

CVE-2023-38245

Technical details for CVE-2023-38245 are not publicly provided in the supplied documents. Please monitor for updates from vendors and security advisories.

CVE-2024-41834

CVE-2024-41834 is an out-of-bounds read vulnerability in Acrobat Reader affecting versions 20.005.30636, 24.002.20965, 24.002.20964, 24.001.30123 and earlier. Exploitation could disclose memory contents and bypass mitigations such as ASLR; successful exploitation requires user interaction (victim...

CVE-2026-47915

The CVE-2026-47915 entry identifies a Use After Free (CWE-416) vulnerability in Acrobat Reader versions 24.001.30365, 26.001.21651, and earlier. The flaw could allow arbitrary code execution in the context of the current user and requires user interaction, with exploitation possible only after th...