CVE-2017-3118

CVE-2017-3118 is listed among multiple vulnerabilities addressed by Adobe’s APSB17-24 security updates for Acrobat/Reader products (including Acrobat Reader 2017 and various DC/Classic/Continuous tracks). The OpenVAS entries indicate this CVE is part of a batch reported for Acrobat/Reader on Mac,...

CVE-2020-24429

CVE-2020-24429 concerns macOS Adobe Acrobat Reader DC where a signature verification bypass could enable local privilege escalation. Affected are macOS builds such as 2017.011.30175 and earlier, and newer 2020.x versions listed in the entry. Exploitation requires user interaction (opening a malic...

CVE-2020-24438

CVE-2020-24438 affects Adobe Acrobat/Reader (Acrobat Reader DC) versions 2020.012.20048 and earlier, 2020.001.30005 and earlier, and 2017.011.30175 and earlier. The issue is a use-after-free vulnerability that could lead to a memory address leak. Exploitation requires user interaction (the victim...

CVE-2021-39846

CVE-2021-39846 affects Acrobat Reader DC and earlier, where a crafted PDF triggers a stack overflow from insecure PDF handling, potentially causing memory corruption in the current user context. Exploitation requires user interaction (opening a crafted file). Public technical details in the suppl...

CVE-2021-39851

CVE-2021-39851 affects Adobe Acrobat Reader DC (variants listed in the initial document) with a Null Pointer Dereference that can cause an application denial-of-service in the context of the current user. An unauthenticated attacker could trigger this by convincing a victim to open a malicious fi...

CVE-2021-39854

CVE-2021-39854 affects Acrobat Reader DC versions 2021.005.20060 and earlier, 2020.004.30006 and earlier, and 2017.011.30199 and earlier. It is a Null pointer dereference vulnerability that could cause an application denial-of-service in the context of the current user. Exploitation requires user...

CVE-2023-22242

CVE-2023-22242 affects Adobe Acrobat Reader DC/Reader with an out-of-bounds write in AcroForm annotations that could lead to arbitrary code execution. Affected versions include 22.003.20282 and earlier, 22.003.20281 and earlier, and 20.005.30418 and earlier. Exploitation requires user interaction...

CVE-2000-0713

CVE-2000-0713 describes a buffer overflow in Adobe Acrobat 4.05 family products (Acrobat/Reader/Business Tools/Fill In) related to handling PDF CID fonts via long /Registry and /Ordering specifiers. The underlying flaw is unchecked bounds during processing of these entries, enabling arbitrary cod...

CVE-2009-2028

CVE-2009-2028 is part of multiple vulnerabilities in Adobe Reader and Acrobat across version families (7.x before 7.1.3, 8.x before 8.1.6, and 9.x before 9.1.2). Public advisories enumerate several CVEs (e.g., CVE-2009-0198, CVE-2009-0509/0510/0511/0512, CVE-2009-0888/0889, CVE-2009-1492/1493, CV...

CVE-2009-2981

Technical details for CVE-2009-2981 (affected Adobe Reader/Acrobat versions and exploit vectors) are not publicly provided in the connected documents. Monitor for updates from vendors/advisories to obtain concrete remediation information and confirmed impact.

CVE-2010-0190

CVE-2010-0190 affects Adobe Reader and Acrobat: XSS vulnerability in Adobe Reader/Acrobat 9.x before 9.3.2 and 8.x before 8.2.2 on Windows and macOS. The exploit enables remote attackers to inject arbitrary web script/HTML via unspecified vectors. Affected component is the PDF handling/viewer; ro...

CVE-2013-1376

CVE-2013-1376 : Buffer overflow in Adobe Reader and Acrobat 9.x prior to 9.5.3, 10.x prior to 10.1.5, and 11.x prior to 11.0.1 can allow arbitrary code execution via unspecified vectors. This CVE is noted as distinct from CVE-2013-0606, CVE-2013-0612, CVE-2013-0615, CVE-2013-0617, and CVE-2013-06...

CVE-2014-0527

CVE-2014-0527 is a use-after-free vulnerability in Adobe Reader and Acrobat on Windows and macOS, affecting Adobe Reader/Acrobat 10.x before 10.1.10 and 11.x before 11.0.07. The root cause is a memory-management error that can allow arbitrary code execution. The vectors are unspecified in the pub...

CVE-2014-9159

CVE-2014-9159 is a heap-based buffer overflow in Adobe Reader and Acrobat 10.x before 10.1.13 and 11.x before 11.0.10 on Windows and macOS, enabling arbitrary code execution via unspecified vectors. The issue is documented as part of Adobe’s APSB14-28 advisories and is intertwined with related CV...

CVE-2015-5099

Technical details about CVE-2015-5099 are not publicly provided in the connected documents. Monitor for updates.

CVE-2015-6696

CVE-2015-6696 is a heap-based buffer overflow in Adobe Reader/Acrobat components (notably AcroForm/AGM.dll) on Windows and macOS. Affected are Adobe Reader/Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat/Reader DC Classic before 2015.006.30094 and DC Continuous before 2015.009.20069;...

CVE-2016-1082

CVE-2016-1082 affects Adobe Reader and Acrobat prior to 11.0.16, Acrobat and Acrobat Reader DC Classic prior to 15.006.30172, and Acrobat/Reader DC Continuous prior to 15.016.20039 on Windows and macOS. The vulnerability allows arbitrary code execution or memory corruption via unspecified vectors...

CVE-2016-4119

CVE-2016-4119 affects Adobe Reader and Acrobat prior to 11.0.16, Acrobat/Reader DC Classic before 15.006.30172, and DC Continuous before 15.016.20039 on Windows/macOS. It enables arbitrary code execution or denial of service via memory corruption through unspecified vectors (distinct from CVE-201...

CVE-2016-6938

CVE-2016-6938 is a use-after-free vulnerability in Adobe Reader and Acrobat before 11.0.17, Acrobat and Acrobat Reader DC Classic before 15.006.30198, and Acrobat and Acrobat Reader DC Continuous before 15.017.20050 on Windows/macOS that allows arbitrary code execution via unspecified vectors; it...

CVE-2016-6995

Public technical details for CVE-2016-6995 are not provided in the connected documents; monitor for updates.

CVE-2018-4893

CVE-2018-4893 affects Adobe Acrobat Reader (and related products) versions: 2018.009.20050 and earlier; 2017.011.30070 and earlier; 2015.006.30394 and earlier. The issue is caused by a computation that reads beyond the end of a buffer during XPS font processing, leading to potential exposure of s...

CVE-2021-39853

CVE-2021-39853 affects Adobe Acrobat Reader DC: versions 2021.005.20060 and earlier, 2020.004.30006 and earlier, and 2017.011.30199 and earlier. The flaw is a null pointer dereference that can cause an application denial-of-service in the context of the current user. An unauthenticated attacker c...

CVE-2023-38238

Adobe Acrobat Reader (Windows/macOS/Linux) versions 23.003.20244 and earlier, and 20.005.30467 and earlier, are affected by a Use-After-Free vulnerability that could disclose sensitive memory and bypass ASLR. Exploitation requires the user to open a malicious file, making it a low-attack-vector w...

CVE-2026-47965

The CVE-2026-47965 issue affects Acrobat Reader versions 24.001.30365, 26.001.21651 and earlier. It is an out-of-bounds write (CWE-787) that could allow arbitrary code execution in the context of the current user. Exploitation requires user interaction: a victim must open a malicious file. The av...

CVE-2009-3461

Adobe Acrobat 9.x before 9.2 is affected by an unspecified vulnerability that allows bypassing intended file-extension restrictions via unknown vectors. The issue affects Acrobat on affected builds and can lead to complete confidentiality/integrity/availability impact per CVSS 9.3. Remediation re...

CVE-2010-0195

CVE-2010-0195 concerns Adobe Reader/Acrobat on Windows and macOS, with a flaw in how fonts are handled that can allow an attacker to execute arbitrary code via unspecified vectors. Affected products are Adobe Reader/Acrobat 9.x before 9.3.2 and 8.x before 8.2.2 . The vulnerability enables remote ...

CVE-2011-0610

The CVE-2011-0610 entry concerns a memory-corruption vulnerability in the CoolType library used by Adobe Reader/Acrobat. Affected are Adobe Reader 9.x prior to 9.4.4 and 10.x up to 10.0.1 on Windows, and similarly on Mac OS X, plus Adobe Acrobat 9.x prior to 9.4.4 and 10.x prior to 10.0.3. The is...

CVE-2014-9150

Adobe Reader and Acrobat 11.x on Windows are affected by a TOCTOU race condition in MoveFileEx during sandboxed operations, allowing arbitrary file writes via an NTFS junction attack. The issue affects versions prior to 11.0.09 (and is related to CVE-2014-9150). The root cause is a race condition...

CVE-2015-6705

Adobe Reader/Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2015.006.30094, and Acrobat/Reader DC Continuous before 2015.009.20069 on Windows and macOS are affected by CVE-2015-6705, which allows bypassing intended access restrictions to obtain s...

CVE-2015-7616

Technical details for CVE-2015-7616 are not provided in the connected documents; no affected products, impact, or remediation are described here. Monitor for official updates.

CVE-2016-1053

Technical details for CVE-2016-1053 are not provided in the connected documents; no affected products, impact, or fixes are described here. Monitor for updates in the original sources.

CVE-2016-1054

Technical details for CVE-2016-1054 are not publicly available in the provided Connected documents. Monitor for updates from vendors and security advisories.

CVE-2016-1060

Public technical details about CVE-2016-1060 are not present in the provided connected documents; no affected products, root cause, impact, or remediation are specified.

CVE-2016-1065

CVE-2016-1065 is a use-after-free vulnerability in Adobe Reader and Acrobat pre-11.0.16, Acrobat/Acrobat Reader DC Classic before 15.006.30172, and DC Continuous before 15.016.20039 on Windows and macOS. The issue allows arbitrary code execution via unspecified vectors and is distinct from other ...

CVE-2016-1122

Technical details for CVE-2016-1122 are not publicly available in the provided documents. Monitor for updates.

CVE-2016-4269

Technical details for CVE-2016-4269 are not publicly available in the provided connected documents. Monitor for updates from vendors and standard sources.

CVE-2016-6949

Technical details about CVE-2016-6949 are not publicly available in the provided documents. Monitor for updates; current sources do not specify affected products, root cause, vectors, impact, or fixes beyond the NVD entry.

CVE-2016-6958

CVE-2016-6958 concerns Adobe Reader and Acrobat on Windows and macOS. The vulnerability enables an attacker to bypass intended access restrictions in several affected builds: Adobe Reader and Acrobat before 11.0.18, and Acrobat/Reader DC Classic before 15.006.30243, or Continuous before 15.020.20...

CVE-2016-6970

Technical details for CVE-2016-6970 are not publicly available in the provided documents. Monitor for updates from Adobe and security advisories.

CVE-2018-4910

CVE-2018-4910 affects Adobe Acrobat Reader versions 2018.009.20050 and earlier, 2017.011.30070 and earlier, and 2015.006.30394 and earlier. It is a heap overflow in the JavaScript engine triggered by a crafted PDF using JavaScript that manipulates the Optional Content Group (OCG). Successful expl...

CVE-2018-4915

CVE-2018-4915 affects Adobe Acrobat Reader versions up to 2018.009.20050, 2017.011.30070, and 2015.006.30394. The issue is caused by a buffer overrun in the JavaScript API related to color conversion, where data is written past the end of the intended buffer. Practical impact per the sources is p...

CVE-2018-4916

Adobe Acrobat Reader vulnerabilities CVE-2018-4916 affect versions up to 2018.009.20050, 2017.011.30070, and 2015.006.30394. The issue stems from a calculation in the TIFF image data handling within the image conversion module, which can write past the end of the intended buffer. Consequences inc...

CVE-2023-38236

CVE-2023-38236 affects Adobe Acrobat Reader versions 23.003.20244 and earlier, and 20.005.30467 and earlier, with an out-of-bounds read vulnerability that could disclose memory and bypass ASLR. Exploitation requires user interaction (victim opens a malicious file). CVSS v3.1 base score 5.5 (Mediu...

CVE-2026-47913

Acrobat Reader (versions 24.001.30365, 26.001.21651 and earlier) is affected by a Use After Free (CWE-416) vulnerability that could lead to arbitrary code execution in the context of the current user. Exploitation requires user interaction: the victim must open a malicious file. The CVE is report...

CVE-2009-2982

Public technical details (affected products, exact root cause, exploit vectors) for CVE-2009-2982 are not provided in the connected documents. Monitor for forthcoming updates.

CVE-2009-3462

CVE-2009-3462 affects Adobe Reader and Acrobat on Unix (7.x/8.x/9.x) when Debug mode is enabled, enabling arbitrary code execution via a format bug. Connected advisories confirm patches: Red Hat RHSA-2009:1499 and SUSE SUSE-SA:2009:049 address Acrobat/Reader updates including acroread/acroread_ja...

CVE-2010-0192

CVE-2010-0192 affects Adobe Reader/Acrobat on Windows and macOS: vulnerable are Acrobat/Reader 9.x before 9.3.2 and 8.x before 8.2.2 . The vulnerability is described as unspecified with potential for denial of service or possibly executing arbitrary code via unknown vectors. Connected advisories ...

CVE-2010-0203

CVE-2010-0203 is a buffer overflow in Adobe Reader/Acrobat 9.x before 9.3.2 and 8.x before 8.2.2 on Windows/macOS. Connected advisories (RHSA-2010:0349; GLSA-201009-05) confirm a security update for acroread and multiple related CVEs, with remediation involving upgrading to fixed versions. Gentoo...

CVE-2011-2100

CVE-2011-2100 affects Adobe Reader and Acrobat on Windows, where an untrusted search path enables local privilege escalation via a Trojan horse DLL located in the current working directory. Affected products/versions include Adobe Reader/Acrobat 8.x prior to 8.3, 9.x prior to 9.4.5, and 10.x prio...

CVE-2013-0612

CVE-2013-0612 is part of a set describing a buffer overflow in Adobe Reader and Acrobat. The connected documents specify that affected products are Adobe Reader and Acrobat 9.x prior to 9.5.3, 10.x prior to 10.1.5, and 11.x prior to 11.0.1. The vulnerability enables attackers to execute arbitrary...