CVE-2016-7000

Technical details about CVE-2016-7000 are not provided in the connected documents. The initial entry lists affected Adobe products and versions but does not specify root cause, vulnerable components, or remediation. Monitor for updates.

CVE-2016-7019

Technical details about CVE-2016-7019 are not publicly available in the provided Connected Documents. Monitor for updates from vendors and security advisories.

CVE-2017-16413

Technical details for CVE-2017-16413 are not publicly provided in the supplied documents. Monitor for updates and entry clarifications.

CVE-2017-2945

CVE-2017-2945 is a heap overflow vulnerability affecting Adobe Acrobat/Reader when parsing TIFF images. Affected versions include Adobe Acrobat Reader 15.020.20042 and earlier, 15.006.30244 and earlier, and 11.0.18 and earlier. Successful exploitation could lead to arbitrary code execution. The c...

CVE-2017-3118

CVE-2017-3118 is listed among multiple vulnerabilities addressed by Adobe’s APSB17-24 security updates for Acrobat/Reader products (including Acrobat Reader 2017 and various DC/Classic/Continuous tracks). The OpenVAS entries indicate this CVE is part of a batch reported for Acrobat/Reader on Mac,...

CVE-2020-24429

CVE-2020-24429 concerns macOS Adobe Acrobat Reader DC where a signature verification bypass could enable local privilege escalation. Affected are macOS builds such as 2017.011.30175 and earlier, and newer 2020.x versions listed in the entry. Exploitation requires user interaction (opening a malic...

CVE-2020-24438

CVE-2020-24438 affects Adobe Acrobat/Reader (Acrobat Reader DC) versions 2020.012.20048 and earlier, 2020.001.30005 and earlier, and 2017.011.30175 and earlier. The issue is a use-after-free vulnerability that could lead to a memory address leak. Exploitation requires user interaction (the victim...

CVE-2021-39846

CVE-2021-39846 affects Acrobat Reader DC and earlier, where a crafted PDF triggers a stack overflow from insecure PDF handling, potentially causing memory corruption in the current user context. Exploitation requires user interaction (opening a crafted file). Public technical details in the suppl...

CVE-2021-39851

CVE-2021-39851 affects Adobe Acrobat Reader DC (variants listed in the initial document) with a Null Pointer Dereference that can cause an application denial-of-service in the context of the current user. An unauthenticated attacker could trigger this by convincing a victim to open a malicious fi...

CVE-2021-39853

CVE-2021-39853 affects Adobe Acrobat Reader DC: versions 2021.005.20060 and earlier, 2020.004.30006 and earlier, and 2017.011.30199 and earlier. The flaw is a null pointer dereference that can cause an application denial-of-service in the context of the current user. An unauthenticated attacker c...

CVE-2021-39854

CVE-2021-39854 affects Acrobat Reader DC versions 2021.005.20060 and earlier, 2020.004.30006 and earlier, and 2017.011.30199 and earlier. It is a Null pointer dereference vulnerability that could cause an application denial-of-service in the context of the current user. Exploitation requires user...

CVE-2000-0713

CVE-2000-0713 describes a buffer overflow in Adobe Acrobat 4.05 family products (Acrobat/Reader/Business Tools/Fill In) related to handling PDF CID fonts via long /Registry and /Ordering specifiers. The underlying flaw is unchecked bounds during processing of these entries, enabling arbitrary cod...

CVE-2009-2028

CVE-2009-2028 is part of multiple vulnerabilities in Adobe Reader and Acrobat across version families (7.x before 7.1.3, 8.x before 8.1.6, and 9.x before 9.1.2). Public advisories enumerate several CVEs (e.g., CVE-2009-0198, CVE-2009-0509/0510/0511/0512, CVE-2009-0888/0889, CVE-2009-1492/1493, CV...

CVE-2009-2981

Technical details for CVE-2009-2981 (affected Adobe Reader/Acrobat versions and exploit vectors) are not publicly provided in the connected documents. Monitor for updates from vendors/advisories to obtain concrete remediation information and confirmed impact.

CVE-2010-0190

CVE-2010-0190 affects Adobe Reader and Acrobat: XSS vulnerability in Adobe Reader/Acrobat 9.x before 9.3.2 and 8.x before 8.2.2 on Windows and macOS. The exploit enables remote attackers to inject arbitrary web script/HTML via unspecified vectors. Affected component is the PDF handling/viewer; ro...

CVE-2013-1376

CVE-2013-1376 : Buffer overflow in Adobe Reader and Acrobat 9.x prior to 9.5.3, 10.x prior to 10.1.5, and 11.x prior to 11.0.1 can allow arbitrary code execution via unspecified vectors. This CVE is noted as distinct from CVE-2013-0606, CVE-2013-0612, CVE-2013-0615, CVE-2013-0617, and CVE-2013-06...

CVE-2014-0527

CVE-2014-0527 is a use-after-free vulnerability in Adobe Reader and Acrobat on Windows and macOS, affecting Adobe Reader/Acrobat 10.x before 10.1.10 and 11.x before 11.0.07. The root cause is a memory-management error that can allow arbitrary code execution. The vectors are unspecified in the pub...

CVE-2014-9159

CVE-2014-9159 is a heap-based buffer overflow in Adobe Reader and Acrobat 10.x before 10.1.13 and 11.x before 11.0.10 on Windows and macOS, enabling arbitrary code execution via unspecified vectors. The issue is documented as part of Adobe’s APSB14-28 advisories and is intertwined with related CV...

CVE-2015-6696

CVE-2015-6696 is a heap-based buffer overflow in Adobe Reader/Acrobat components (notably AcroForm/AGM.dll) on Windows and macOS. Affected are Adobe Reader/Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat/Reader DC Classic before 2015.006.30094 and DC Continuous before 2015.009.20069;...

CVE-2015-7616

Technical details for CVE-2015-7616 are not provided in the connected documents; no affected products, impact, or remediation are described here. Monitor for official updates.

CVE-2016-1065

CVE-2016-1065 is a use-after-free vulnerability in Adobe Reader and Acrobat pre-11.0.16, Acrobat/Acrobat Reader DC Classic before 15.006.30172, and DC Continuous before 15.016.20039 on Windows and macOS. The issue allows arbitrary code execution via unspecified vectors and is distinct from other ...

CVE-2016-1082

CVE-2016-1082 affects Adobe Reader and Acrobat prior to 11.0.16, Acrobat and Acrobat Reader DC Classic prior to 15.006.30172, and Acrobat/Reader DC Continuous prior to 15.016.20039 on Windows and macOS. The vulnerability allows arbitrary code execution or memory corruption via unspecified vectors...

CVE-2016-4119

CVE-2016-4119 affects Adobe Reader and Acrobat prior to 11.0.16, Acrobat/Reader DC Classic before 15.006.30172, and DC Continuous before 15.016.20039 on Windows/macOS. It enables arbitrary code execution or denial of service via memory corruption through unspecified vectors (distinct from CVE-201...

CVE-2016-6941

CVE-2016-6941 affects Adobe Reader and Acrobat before 11.0.18, Acrobat and Acrobat Reader DC Classic before 15.006.30243, and Acrobat/Reader DC Continuous before 15.020.20039 on Windows and OS X. The issue allows attackers to execute arbitrary code or cause a denial of service via memory corrupti...

CVE-2016-6965

This CVE (CVE-2016-6965) describes a use-after-free vulnerability in Adobe Reader/Acrobat prior to 11.0.18, Acrobat/Reader DC Classic prior to 15.006.30243, and DC Continuous prior to 15.020.20039 on Windows and OS X. The issue allows attackers to execute arbitrary code via unspecified vectors an...

CVE-2016-6970

Technical details for CVE-2016-6970 are not publicly available in the provided documents. Monitor for updates from Adobe and security advisories.

CVE-2016-6995

Public technical details for CVE-2016-6995 are not provided in the connected documents; monitor for updates.

CVE-2018-4893

CVE-2018-4893 affects Adobe Acrobat Reader (and related products) versions: 2018.009.20050 and earlier; 2017.011.30070 and earlier; 2015.006.30394 and earlier. The issue is caused by a computation that reads beyond the end of a buffer during XPS font processing, leading to potential exposure of s...

CVE-2023-38238

Adobe Acrobat Reader (Windows/macOS/Linux) versions 23.003.20244 and earlier, and 20.005.30467 and earlier, are affected by a Use-After-Free vulnerability that could disclose sensitive memory and bypass ASLR. Exploitation requires the user to open a malicious file, making it a low-attack-vector w...

CVE-2026-47965

The CVE-2026-47965 issue affects Acrobat Reader versions 24.001.30365, 26.001.21651 and earlier. It is an out-of-bounds write (CWE-787) that could allow arbitrary code execution in the context of the current user. Exploitation requires user interaction: a victim must open a malicious file. The av...

CVE-2010-0195

CVE-2010-0195 concerns Adobe Reader/Acrobat on Windows and macOS, with a flaw in how fonts are handled that can allow an attacker to execute arbitrary code via unspecified vectors. Affected products are Adobe Reader/Acrobat 9.x before 9.3.2 and 8.x before 8.2.2 . The vulnerability enables remote ...

CVE-2011-0610

The CVE-2011-0610 entry concerns a memory-corruption vulnerability in the CoolType library used by Adobe Reader/Acrobat. Affected are Adobe Reader 9.x prior to 9.4.4 and 10.x up to 10.0.1 on Windows, and similarly on Mac OS X, plus Adobe Acrobat 9.x prior to 9.4.4 and 10.x prior to 10.0.3. The is...

CVE-2014-8456

CVE-2014-8456 affects Adobe Reader/Acrobat on Windows and macOS. The issue is a memory corruption vulnerability in the PDF parsing path, allowing a remote attacker to execute arbitrary code or cause a crash when a user opens a specially crafted PDF. Affected versions include Adobe Reader and Acro...

CVE-2014-9150

Adobe Reader and Acrobat 11.x on Windows are affected by a TOCTOU race condition in MoveFileEx during sandboxed operations, allowing arbitrary file writes via an NTFS junction attack. The issue affects versions prior to 11.0.09 (and is related to CVE-2014-9150). The root cause is a race condition...

CVE-2015-6705

Adobe Reader/Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2015.006.30094, and Acrobat/Reader DC Continuous before 2015.009.20069 on Windows and macOS are affected by CVE-2015-6705, which allows bypassing intended access restrictions to obtain s...

CVE-2016-1053

Technical details for CVE-2016-1053 are not provided in the connected documents; no affected products, impact, or fixes are described here. Monitor for updates in the original sources.

CVE-2016-1054

Technical details for CVE-2016-1054 are not publicly available in the provided Connected documents. Monitor for updates from vendors and security advisories.

CVE-2016-1060

Public technical details about CVE-2016-1060 are not present in the provided connected documents; no affected products, root cause, impact, or remediation are specified.

CVE-2016-1064

Technical details about CVE-2016-1064 are not publicly available in the provided connected documents. Please monitor for updates.

CVE-2016-1122

Technical details for CVE-2016-1122 are not publicly available in the provided documents. Monitor for updates.

CVE-2016-4269

Technical details for CVE-2016-4269 are not publicly available in the provided connected documents. Monitor for updates from vendors and standard sources.

CVE-2016-6949

Technical details about CVE-2016-6949 are not publicly available in the provided documents. Monitor for updates; current sources do not specify affected products, root cause, vectors, impact, or fixes beyond the NVD entry.

CVE-2016-6958

CVE-2016-6958 concerns Adobe Reader and Acrobat on Windows and macOS. The vulnerability enables an attacker to bypass intended access restrictions in several affected builds: Adobe Reader and Acrobat before 11.0.18, and Acrobat/Reader DC Classic before 15.006.30243, or Continuous before 15.020.20...

CVE-2016-7001

CVE-2016-7001 affects Adobe Reader and Acrobat products: Adobe Reader and Acrobat before 11.0.18, Acrobat/Reader DC Classic before 15.006.30243, and Acrobat/Reader DC Continuous before 15.020.20039 on Windows and macOS. The vulnerability allows attacker-controlled memory corruption to execute arb...

CVE-2018-4910

CVE-2018-4910 affects Adobe Acrobat Reader versions 2018.009.20050 and earlier, 2017.011.30070 and earlier, and 2015.006.30394 and earlier. It is a heap overflow in the JavaScript engine triggered by a crafted PDF using JavaScript that manipulates the Optional Content Group (OCG). Successful expl...

CVE-2018-4915

CVE-2018-4915 affects Adobe Acrobat Reader versions up to 2018.009.20050, 2017.011.30070, and 2015.006.30394. The issue is caused by a buffer overrun in the JavaScript API related to color conversion, where data is written past the end of the intended buffer. Practical impact per the sources is p...

CVE-2018-4916

Adobe Acrobat Reader vulnerabilities CVE-2018-4916 affect versions up to 2018.009.20050, 2017.011.30070, and 2015.006.30394. The issue stems from a calculation in the TIFF image data handling within the image conversion module, which can write past the end of the intended buffer. Consequences inc...

CVE-2020-24439

CVE-2020-24439 affects Acrobat Reader DC for macOS versions 2017.011.30175, 2020.001.30005, and 2020.012.20048 and earlier. It is a security feature bypass (update/verification process) with minimal practical impact; a defense-in-depth fix has been implemented to harden the Adobe Reader update pr...

CVE-2023-38236

CVE-2023-38236 affects Adobe Acrobat Reader versions 23.003.20244 and earlier, and 20.005.30467 and earlier, with an out-of-bounds read vulnerability that could disclose memory and bypass ASLR. Exploitation requires user interaction (victim opens a malicious file). CVSS v3.1 base score 5.5 (Mediu...

CVE-2026-34626

Acrobat Reader is affected by CVE-2026-34626: vulnerable versions include 26.001.21411, 24.001.30360, and 24.001.30362 and earlier. The issue is an Improperly Controlled Modification of Object Prototype Attributes (prototype pollution) that could enable arbitrary file system read in the context o...