CVE-2013-0617

CVE-2013-0617 affects Adobe Reader and Acrobat. A buffer overflow in these products (9.x before 9.5.3; 10.x before 10.1.5; 11.x before 11.0.1) could allow arbitrary code execution via unspecified vectors. The initial description lists affected versions and the impact; exploit details and vectors ...

CVE-2014-8445

CVE-2014-8445 involves memory corruption in Adobe Reader and Acrobat. The connected advisories describe vulnerability rooted in parsing a corrupted PDF file, allowing a remote attacker to trigger code execution or memory corruption by convincing a user to open a crafted PDF. Affected products are...

CVE-2014-8451

CVE-2014-8451 concerns Adobe Reader/Acrobat 10.x (before 10.1.13) and 11.x (before 11.0.10) on Windows and OS X. The issue is an information-disclosure vulnerability arising from an improper implementation of a JavaScript API within the product. A remote attacker could lure a user to open a speci...

CVE-2015-5092

Technical details about CVE-2015-5092 are not publicly available in the provided Connected documents. Monitor for updates.

CVE-2015-5108

CVE-2015-5108 is an integer overflow in Adobe Reader and Acrobat affecting Adobe Reader/Acrobat 10.x before 10.1.15 and 11.x before 11.0.12, plus Acrobat/Reader DC Classic before 2015.006.30060 and DC Continuous before 2015.008.20082, on Windows and macOS. The overflow occurs while parsing PDF co...

CVE-2015-6689

CVE-2015-6689 is a use-after-free vulnerability in Adobe Reader and Acrobat affecting 10.x (pre-10.1.16) and 11.x (pre-11.0.13), and Adobe Acrobat/Reader DC Classic before 2015.006.30094 or DC Continuous before 2015.009.20069, on Windows and macOS. The flaw is triggered by a crafted WillSave docu...

CVE-2016-0944

Technical details for CVE-2016-0944 are not provided in the connected documents. The initial entry mentions affected Adobe products and memory corruption/remote code risk but lacks root cause, affected versions, or available fixes. Monitor for updates.

CVE-2016-1071

Technical details about CVE-2016-1071 are not publicly available in the provided connected documents. Monitor for updates from official advisories.

CVE-2016-1073

Technical details for CVE-2016-1073 are not publicly available in the provided documents. Monitor for updates from Adobe and vulnerability databases; no confirmed affected products, exploit vectors, or remediation are listed here.

CVE-2016-1095

Technical details are not publicly available in the provided documents. Monitor for updates.

CVE-2016-1111

CVE-2016-1111 is a double-free vulnerability in Adobe Reader and Acrobat related to parsing the Graphics State dictionary, enabling arbitrary code execution on Windows/macOS. Affected products include Adobe Reader and Acrobat before 11.0.14, Acrobat/Reader DC Classic before 15.006.30119, and DC C...

CVE-2016-1123

Affected software : Adobe Reader and Acrobat before 11.0.16; Acrobat and Acrobat Reader DC Classic before 15.006.30172; Acrobat and Acrobat Reader DC Continuous before 15.016.20039 on Windows and OS X. Issue : arbitrary code execution or memory corruption via unspecified vectors, a different vuln...

CVE-2016-4090

Technical details about CVE-2016-4090 are not publicly available in the provided connected documents. Monitor for updates from the sources referenced in the Initial Description; no explicit vulnerability specifics (exploit vectors, impacted versions, or fixes) are given here.

CVE-2016-4091

Affected software: Adobe Acrobat/Reader on Windows and macOS. Vulnerability details: CVE-2016-4091 (and related CVEs in APSB16-14) are described as heap-based/buffer overflow and use-after-free/memory corruption vulnerabilities that allow arbitrary code execution. The issues affect Acrobat/Reader...

CVE-2016-4212

CVE-2016-4212 affects Adobe Reader and Acrobat prior to 11.0.17, Acrobat and Acrobat Reader DC Classic prior to 15.006.30198, and Acrobat/Reader DC Continuous prior to 15.017.20050 on Windows and macOS. The vulnerability allows arbitrary code execution or memory corruption via unspecified vectors...

CVE-2016-4254

Technical details about CVE-2016-4254 are not publicly available in the provided Connected documents. Monitor for updates from official advisories and vendors.

CVE-2016-6953

CVE-2016-6953 is a use-after-free vulnerability in Adobe Reader and Acrobat prior to 11.0.18, Acrobat and Acrobat Reader DC Classic prior to 15.006.30243, and Acrobat and Acrobat Reader DC Continuous prior to 15.020.20039 on Windows and macOS. The vulnerability allows an attacker to execute arbit...

CVE-2016-6977

Technical details about CVE-2016-6977 are not publicly available in the provided connected documents. Monitor for updates from EUVD records and Adobe advisories for affected products, components, and remediation.

CVE-2017-16408

CVE-2017-16408 affects Adobe Acrobat and Reader on multiple versions: 2017.012.20098 and earlier, 2017.011.30066 and earlier, 2015.006.30355 and earlier, and 11.0.22 and earlier. The issue stems from a computation in the WebCapture module that reads data past the end of a target buffer, caused by...

CVE-2017-16409

CVE-2017-16409 affects Adobe Acrobat and Reader, including multiple legacy builds. The issue arises from a computation that reads data past the end of a target buffer within the Adobe graphics module responsible for displaying text. Using an invalid (out-of-range) pointer offset during access of ...

CVE-2017-2952

CVE-2017-2952 affects Adobe Acrobat Reader and Acrobat, where the image conversion component that parses TIFF tags is vulnerable to a buffer overflow/underflow. This could allow arbitrary code execution on affected versions: 11.0.18 and earlier, 15.006.30244 and earlier, and 15.020.20042 and earl...

CVE-2017-2955

Adobe Acrobat/Reader is affected by CVE-2017-2955, a use-after-free vulnerability in the JavaScript engine that could allow arbitrary code execution when rendering PDF content. Affected products include various versions of Adobe Acrobat Reader (e.g., 15.020.20042 and earlier, 15.006.30244 and ear...

CVE-2017-3009

Adobe Acrobat/Reader (Windows and macOS) versions 15.020.20042 and earlier, 15.006.30244 and earlier, and 11.0.18 and earlier contain a buffer overflow in the JPEG2000 parser (CVE-2017-3009) that could allow information disclosure. This is corroborated by multiple sources (NVD/NASL/Nessus/ZDI) li...

CVE-2020-24436

CVE-2020-24436 affects Adobe Acrobat/Acrobat Pro DC: out-of-bounds write in user-controlled memory could allow arbitrary code execution in the context of the current user. Vulnerable versions include Acrobat Pro DC 2020.012.20048 and earlier, 2020.001.30005 and earlier, and 2017.011.30175 and ear...

CVE-2022-42339

Adobe Acrobat Reader DC/Continuous release users are affected by a stack-based overflow in XFA parsing (CVE-2022-42339). Affected products include Acrobat Reader versions 22.002.20212 and earlier, and 20.005.30381 and earlier. The issue could allow arbitrary code execution in the context of the c...

CVE-2023-38233

Technical details for CVE-2023-38233 are not publicly provided in the connected documents. The supplied records reference the vulnerability and affected Adobe Acrobat versions but do not describe root cause, impacted components, or fixes. Monitor for updates.

CVE-2026-47915

The CVE-2026-47915 entry identifies a Use After Free (CWE-416) vulnerability in Acrobat Reader versions 24.001.30365, 26.001.21651, and earlier. The flaw could allow arbitrary code execution in the context of the current user and requires user interaction, with exploitation possible only after th...

CVE-2026-47926

CVE-2026-47926 affects Acrobat Reader versions 24.001.30365, 26.001.21651 and earlier. The issue is an out-of-bounds read (CWE-125) in the application, leading to potential disclosure of sensitive memory. Exploitation requires user interaction —a victim must open a malicious file. The available d...

CVE-2002-0030

CVE-2002-0030 is a vulnerability in Adobe Acrobat/Reader plug-ins where the digital signature check only validates the plug-in’s PE header, allowing a malicious unsigned plug-in to be loaded as if signed. This enables local attackers to cause arbitrary code execution when Acrobat/Reader loads a c...

CVE-2009-2979

CVE-2009-2979 affects Adobe Reader and Acrobat 9.x before 9.2, 8.x before 8.1.7, and possibly 7.x through 7.1.4. The issue is an improper XMP-XML entity expansion in documents, which can allow a remote attacker to cause a denial of service by crafting a document. The provided sources do not inclu...

CVE-2011-0606

CVE-2011-0606 : A stack-based buffer overflow in rt3d.dll affects Adobe Reader and Acrobat on Windows and macOS. The flaw, triggered by a crafted length value, can allow a remote attacker to execute arbitrary code or cause a denial of service. Impacted products include Adobe Reader/Acrobat 10.x b...

CVE-2012-4161

Technical details (affected component, root cause, exploit vectors, and patch information) are not publicly provided in the connected documents. Monitor for updates.

CVE-2013-2737

Adobe Reader/Acrobat is affected by CVE-2013-2737 due to a vulnerability in the JavaScript API that can disclose sensitive information in multiple 9.x/10.x/11.x releases before fixed. Affected products include Adobe Reader/Acrobat 9.x up to 9.5.4, 10.x up to 10.1.6, and 11.x up to 11.0.02/03 as a...

CVE-2015-3049

CVE-2015-3049 is a memory-disclosure flaw in the OpenType/Type 1 Charstring interpreter (transient array) that can leak uninitialized memory. Connected sources colocate this with Adobe Reader (CoolType) and Windows font engines (DirectWrite/WPF), indicating a cross-product issue in the font raste...

CVE-2015-5101

Technical details for CVE-2015-5101 are not publicly available in the provided Connected documents. The Initial description notes a use-after-free in Adobe Reader/Acrobat with unspecified vectors. No vendor/versions or fixes are provided here. Monitor for updates.

CVE-2015-6683

Technical details for CVE-2015-6683 are not provided in the connected documents; the EUVD entries mention malware but lack specifics on affected products, root cause, or remediation. Monitor for updates.

CVE-2015-6711

Technical details for CVE-2015-6711 are not publicly available in the provided documents. No product/version specifics, impact, or remediation are disclosed here; monitor for updates.

CVE-2016-1086

CVE-2016-1086 affects Adobe Reader and Acrobat prior to specific 11.0.16 and DC Classic/Continuous builds (Windows and macOS) and can lead to arbitrary code execution or a denial of service via memory corruption through unspecified vectors. The description lists affected product families and vers...

CVE-2016-7019

Technical details about CVE-2016-7019 are not publicly available in the provided Connected Documents. Monitor for updates from vendors and security advisories.

CVE-2017-16413

Technical details for CVE-2017-16413 are not publicly provided in the supplied documents. Monitor for updates and entry clarifications.

CVE-2017-2972

Adobe Acrobat Reader (versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier) contains a memory corruption vulnerability in the image conversion module related to JPEG parsing. Successful exploitation could lead to arbitrary code execution. The connected sources confirm ...

CVE-2017-3118

CVE-2017-3118 is listed among multiple vulnerabilities addressed by Adobe’s APSB17-24 security updates for Acrobat/Reader products (including Acrobat Reader 2017 and various DC/Classic/Continuous tracks). The OpenVAS entries indicate this CVE is part of a batch reported for Acrobat/Reader on Mac,...

CVE-2020-24429

CVE-2020-24429 concerns macOS Adobe Acrobat Reader DC where a signature verification bypass could enable local privilege escalation. Affected are macOS builds such as 2017.011.30175 and earlier, and newer 2020.x versions listed in the entry. Exploitation requires user interaction (opening a malic...

CVE-2020-24438

CVE-2020-24438 affects Adobe Acrobat/Reader (Acrobat Reader DC) versions 2020.012.20048 and earlier, 2020.001.30005 and earlier, and 2017.011.30175 and earlier. The issue is a use-after-free vulnerability that could lead to a memory address leak. Exploitation requires user interaction (the victim...

CVE-2021-39846

CVE-2021-39846 affects Acrobat Reader DC and earlier, where a crafted PDF triggers a stack overflow from insecure PDF handling, potentially causing memory corruption in the current user context. Exploitation requires user interaction (opening a crafted file). Public technical details in the suppl...

CVE-2023-21585

CVE-2023-21585 affects Adobe Acrobat Reader DC and Acrobat Reader across Windows and macOS. The issue is an out-of-bounds read in font parsing that could disclose sensitive memory and bypass mitigations such as ASLR; exploitation requires user interaction (the victim must open a malicious file). ...

CVE-2023-22242

CVE-2023-22242 affects Adobe Acrobat Reader DC/Reader with an out-of-bounds write in AcroForm annotations that could lead to arbitrary code execution. Affected versions include 22.003.20282 and earlier, 22.003.20281 and earlier, and 20.005.30418 and earlier. Exploitation requires user interaction...

CVE-2000-0713

CVE-2000-0713 describes a buffer overflow in Adobe Acrobat 4.05 family products (Acrobat/Reader/Business Tools/Fill In) related to handling PDF CID fonts via long /Registry and /Ordering specifiers. The underlying flaw is unchecked bounds during processing of these entries, enabling arbitrary cod...

CVE-2009-2028

CVE-2009-2028 is part of multiple vulnerabilities in Adobe Reader and Acrobat across version families (7.x before 7.1.3, 8.x before 8.1.6, and 9.x before 9.1.2). Public advisories enumerate several CVEs (e.g., CVE-2009-0198, CVE-2009-0509/0510/0511/0512, CVE-2009-0888/0889, CVE-2009-1492/1493, CV...

CVE-2010-0190

CVE-2010-0190 affects Adobe Reader and Acrobat: XSS vulnerability in Adobe Reader/Acrobat 9.x before 9.3.2 and 8.x before 8.2.2 on Windows and macOS. The exploit enables remote attackers to inject arbitrary web script/HTML via unspecified vectors. Affected component is the PDF handling/viewer; ro...