1414 matches found
CVE-2021-39854
CVE-2021-39854 affects Acrobat Reader DC versions 2021.005.20060 and earlier, 2020.004.30006 and earlier, and 2017.011.30199 and earlier. It is a Null pointer dereference vulnerability that could cause an application denial-of-service in the context of the current user. Exploitation requires user...
CVE-2023-21585
CVE-2023-21585 affects Adobe Acrobat Reader DC and Acrobat Reader across Windows and macOS. The issue is an out-of-bounds read in font parsing that could disclose sensitive memory and bypass mitigations such as ASLR; exploitation requires user interaction (the victim must open a malicious file). ...
CVE-2023-22242
CVE-2023-22242 affects Adobe Acrobat Reader DC/Reader with an out-of-bounds write in AcroForm annotations that could lead to arbitrary code execution. Affected versions include 22.003.20282 and earlier, 22.003.20281 and earlier, and 20.005.30418 and earlier. Exploitation requires user interaction...
CVE-2000-0713
CVE-2000-0713 describes a buffer overflow in Adobe Acrobat 4.05 family products (Acrobat/Reader/Business Tools/Fill In) related to handling PDF CID fonts via long /Registry and /Ordering specifiers. The underlying flaw is unchecked bounds during processing of these entries, enabling arbitrary cod...
CVE-2009-2028
CVE-2009-2028 is part of multiple vulnerabilities in Adobe Reader and Acrobat across version families (7.x before 7.1.3, 8.x before 8.1.6, and 9.x before 9.1.2). Public advisories enumerate several CVEs (e.g., CVE-2009-0198, CVE-2009-0509/0510/0511/0512, CVE-2009-0888/0889, CVE-2009-1492/1493, CV...
CVE-2009-2981
Technical details for CVE-2009-2981 (affected Adobe Reader/Acrobat versions and exploit vectors) are not publicly provided in the connected documents. Monitor for updates from vendors/advisories to obtain concrete remediation information and confirmed impact.
CVE-2009-2988
Technical specifics (affected products/versions, root cause, exploit details, and remediation) are not provided in the connected documents beyond the initial summary; monitor for updates.
CVE-2010-0190
CVE-2010-0190 affects Adobe Reader and Acrobat: XSS vulnerability in Adobe Reader/Acrobat 9.x before 9.3.2 and 8.x before 8.2.2 on Windows and macOS. The exploit enables remote attackers to inject arbitrary web script/HTML via unspecified vectors. Affected component is the PDF handling/viewer; ro...
CVE-2013-1376
CVE-2013-1376 : Buffer overflow in Adobe Reader and Acrobat 9.x prior to 9.5.3, 10.x prior to 10.1.5, and 11.x prior to 11.0.1 can allow arbitrary code execution via unspecified vectors. This CVE is noted as distinct from CVE-2013-0606, CVE-2013-0612, CVE-2013-0615, CVE-2013-0617, and CVE-2013-06...
CVE-2014-0527
CVE-2014-0527 is a use-after-free vulnerability in Adobe Reader and Acrobat on Windows and macOS, affecting Adobe Reader/Acrobat 10.x before 10.1.10 and 11.x before 11.0.07. The root cause is a memory-management error that can allow arbitrary code execution. The vectors are unspecified in the pub...
CVE-2014-9159
CVE-2014-9159 is a heap-based buffer overflow in Adobe Reader and Acrobat 10.x before 10.1.13 and 11.x before 11.0.10 on Windows and macOS, enabling arbitrary code execution via unspecified vectors. The issue is documented as part of Adobe’s APSB14-28 advisories and is intertwined with related CV...
CVE-2015-5099
Technical details about CVE-2015-5099 are not publicly provided in the connected documents. Monitor for updates.
CVE-2015-6696
CVE-2015-6696 is a heap-based buffer overflow in Adobe Reader/Acrobat components (notably AcroForm/AGM.dll) on Windows and macOS. Affected are Adobe Reader/Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat/Reader DC Classic before 2015.006.30094 and DC Continuous before 2015.009.20069;...
CVE-2016-1039
Technical details about CVE-2016-1039 are not provided in the supplied documents; related EUVD entries exist (malware notes) but contain no concrete vulnerability specifics, affected products, versions, impact, or remediation.
CVE-2016-1082
CVE-2016-1082 affects Adobe Reader and Acrobat prior to 11.0.16, Acrobat and Acrobat Reader DC Classic prior to 15.006.30172, and Acrobat/Reader DC Continuous prior to 15.016.20039 on Windows and macOS. The vulnerability allows arbitrary code execution or memory corruption via unspecified vectors...
CVE-2016-4119
CVE-2016-4119 affects Adobe Reader and Acrobat prior to 11.0.16, Acrobat/Reader DC Classic before 15.006.30172, and DC Continuous before 15.016.20039 on Windows/macOS. It enables arbitrary code execution or denial of service via memory corruption through unspecified vectors (distinct from CVE-201...
CVE-2016-6995
Public technical details for CVE-2016-6995 are not provided in the connected documents; monitor for updates.
CVE-2016-7000
Technical details about CVE-2016-7000 are not provided in the connected documents. The initial entry lists affected Adobe products and versions but does not specify root cause, vulnerable components, or remediation. Monitor for updates.
CVE-2018-4893
CVE-2018-4893 affects Adobe Acrobat Reader (and related products) versions: 2018.009.20050 and earlier; 2017.011.30070 and earlier; 2015.006.30394 and earlier. The issue is caused by a computation that reads beyond the end of a buffer during XPS font processing, leading to potential exposure of s...
CVE-2021-39851
CVE-2021-39851 affects Adobe Acrobat Reader DC (variants listed in the initial document) with a Null Pointer Dereference that can cause an application denial-of-service in the context of the current user. An unauthenticated attacker could trigger this by convincing a victim to open a malicious fi...
CVE-2021-39853
CVE-2021-39853 affects Adobe Acrobat Reader DC: versions 2021.005.20060 and earlier, 2020.004.30006 and earlier, and 2017.011.30199 and earlier. The flaw is a null pointer dereference that can cause an application denial-of-service in the context of the current user. An unauthenticated attacker c...
CVE-2023-38238
Adobe Acrobat Reader (Windows/macOS/Linux) versions 23.003.20244 and earlier, and 20.005.30467 and earlier, are affected by a Use-After-Free vulnerability that could disclose sensitive memory and bypass ASLR. Exploitation requires the user to open a malicious file, making it a low-attack-vector w...
CVE-2009-3461
Adobe Acrobat 9.x before 9.2 is affected by an unspecified vulnerability that allows bypassing intended file-extension restrictions via unknown vectors. The issue affects Acrobat on affected builds and can lead to complete confidentiality/integrity/availability impact per CVSS 9.3. Remediation re...
CVE-2010-0195
CVE-2010-0195 concerns Adobe Reader/Acrobat on Windows and macOS, with a flaw in how fonts are handled that can allow an attacker to execute arbitrary code via unspecified vectors. Affected products are Adobe Reader/Acrobat 9.x before 9.3.2 and 8.x before 8.2.2 . The vulnerability enables remote ...
CVE-2011-0610
The CVE-2011-0610 entry concerns a memory-corruption vulnerability in the CoolType library used by Adobe Reader/Acrobat. Affected are Adobe Reader 9.x prior to 9.4.4 and 10.x up to 10.0.1 on Windows, and similarly on Mac OS X, plus Adobe Acrobat 9.x prior to 9.4.4 and 10.x prior to 10.0.3. The is...
CVE-2014-9150
Adobe Reader and Acrobat 11.x on Windows are affected by a TOCTOU race condition in MoveFileEx during sandboxed operations, allowing arbitrary file writes via an NTFS junction attack. The issue affects versions prior to 11.0.09 (and is related to CVE-2014-9150). The root cause is a race condition...
CVE-2015-6705
Adobe Reader/Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2015.006.30094, and Acrobat/Reader DC Continuous before 2015.009.20069 on Windows and macOS are affected by CVE-2015-6705, which allows bypassing intended access restrictions to obtain s...
CVE-2015-7616
Technical details for CVE-2015-7616 are not provided in the connected documents; no affected products, impact, or remediation are described here. Monitor for official updates.
CVE-2016-1053
Technical details for CVE-2016-1053 are not provided in the connected documents; no affected products, impact, or fixes are described here. Monitor for updates in the original sources.
CVE-2016-1054
Technical details for CVE-2016-1054 are not publicly available in the provided Connected documents. Monitor for updates from vendors and security advisories.
CVE-2016-1060
Public technical details about CVE-2016-1060 are not present in the provided connected documents; no affected products, root cause, impact, or remediation are specified.
CVE-2016-1065
CVE-2016-1065 is a use-after-free vulnerability in Adobe Reader and Acrobat pre-11.0.16, Acrobat/Acrobat Reader DC Classic before 15.006.30172, and DC Continuous before 15.016.20039 on Windows and macOS. The issue allows arbitrary code execution via unspecified vectors and is distinct from other ...
CVE-2016-1122
Technical details for CVE-2016-1122 are not publicly available in the provided documents. Monitor for updates.
CVE-2016-4269
Technical details for CVE-2016-4269 are not publicly available in the provided connected documents. Monitor for updates from vendors and standard sources.
CVE-2016-6938
CVE-2016-6938 is a use-after-free vulnerability in Adobe Reader and Acrobat before 11.0.17, Acrobat and Acrobat Reader DC Classic before 15.006.30198, and Acrobat and Acrobat Reader DC Continuous before 15.017.20050 on Windows/macOS that allows arbitrary code execution via unspecified vectors; it...
CVE-2016-6958
CVE-2016-6958 concerns Adobe Reader and Acrobat on Windows and macOS. The vulnerability enables an attacker to bypass intended access restrictions in several affected builds: Adobe Reader and Acrobat before 11.0.18, and Acrobat/Reader DC Classic before 15.006.30243, or Continuous before 15.020.20...
CVE-2016-6970
Technical details for CVE-2016-6970 are not publicly available in the provided documents. Monitor for updates from Adobe and security advisories.
CVE-2018-4910
CVE-2018-4910 affects Adobe Acrobat Reader versions 2018.009.20050 and earlier, 2017.011.30070 and earlier, and 2015.006.30394 and earlier. It is a heap overflow in the JavaScript engine triggered by a crafted PDF using JavaScript that manipulates the Optional Content Group (OCG). Successful expl...
CVE-2018-4915
CVE-2018-4915 affects Adobe Acrobat Reader versions up to 2018.009.20050, 2017.011.30070, and 2015.006.30394. The issue is caused by a buffer overrun in the JavaScript API related to color conversion, where data is written past the end of the intended buffer. Practical impact per the sources is p...
CVE-2018-4916
Adobe Acrobat Reader vulnerabilities CVE-2018-4916 affect versions up to 2018.009.20050, 2017.011.30070, and 2015.006.30394. The issue stems from a calculation in the TIFF image data handling within the image conversion module, which can write past the end of the intended buffer. Consequences inc...
CVE-2026-47913
Acrobat Reader (versions 24.001.30365, 26.001.21651 and earlier) is affected by a Use After Free (CWE-416) vulnerability that could lead to arbitrary code execution in the context of the current user. Exploitation requires user interaction: the victim must open a malicious file. The CVE is report...
CVE-2026-47965
The CVE-2026-47965 issue affects Acrobat Reader versions 24.001.30365, 26.001.21651 and earlier. It is an out-of-bounds write (CWE-787) that could allow arbitrary code execution in the context of the current user. Exploitation requires user interaction: a victim must open a malicious file. The av...
CVE-2009-2982
Public technical details (affected products, exact root cause, exploit vectors) for CVE-2009-2982 are not provided in the connected documents. Monitor for forthcoming updates.
CVE-2009-3462
CVE-2009-3462 affects Adobe Reader and Acrobat on Unix (7.x/8.x/9.x) when Debug mode is enabled, enabling arbitrary code execution via a format bug. Connected advisories confirm patches: Red Hat RHSA-2009:1499 and SUSE SUSE-SA:2009:049 address Acrobat/Reader updates including acroread/acroread_ja...
CVE-2010-0192
CVE-2010-0192 affects Adobe Reader/Acrobat on Windows and macOS: vulnerable are Acrobat/Reader 9.x before 9.3.2 and 8.x before 8.2.2 . The vulnerability is described as unspecified with potential for denial of service or possibly executing arbitrary code via unknown vectors. Connected advisories ...
CVE-2010-0203
CVE-2010-0203 is a buffer overflow in Adobe Reader/Acrobat 9.x before 9.3.2 and 8.x before 8.2.2 on Windows/macOS. Connected advisories (RHSA-2010:0349; GLSA-201009-05) confirm a security update for acroread and multiple related CVEs, with remediation involving upgrading to fixed versions. Gentoo...
CVE-2011-2100
CVE-2011-2100 affects Adobe Reader and Acrobat on Windows, where an untrusted search path enables local privilege escalation via a Trojan horse DLL located in the current working directory. Affected products/versions include Adobe Reader/Acrobat 8.x prior to 8.3, 9.x prior to 9.4.5, and 10.x prio...
CVE-2013-0612
CVE-2013-0612 is part of a set describing a buffer overflow in Adobe Reader and Acrobat. The connected documents specify that affected products are Adobe Reader and Acrobat 9.x prior to 9.5.3, 10.x prior to 10.1.5, and 11.x prior to 11.0.1. The vulnerability enables attackers to execute arbitrary...