CVE-2009-3460

CVE-2009-3460 affects Adobe Acrobat/Reader: Adobe Acrobat 9.x before 9.2, 8.x before 8.1.7, and possibly 7.x through 7.1.4. The vulnerability allows a denial of service (memory corruption) and possibly arbitrary code execution via unspecified vectors. The available documents do not specify exploi...

CVE-2011-0564

CVE-2011-0564 affects Adobe Reader X (10.0) on Windows and Adobe Acrobat X/9.x/8.x; the issue is a Windows-file-permissions weakness that could allow privilege escalation via unspecified files. Adobe’s APSB11-03 updates address this and related CVEs (CVE-2010-4091, CVE-2011-0562, CVE-2011-0563, e...

CVE-2011-0605

Adobe Reader/Acrobat on Mac OS X (8.x, 9.x, 10.x) is affected by memory‑corruption vulnerabilities leading to possible code execution or DoS (CVE‑2010‑4091, CVE‑2011‑0562..0606). Affected versions include 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6; remediation is to upgrade to the...

CVE-2016-6976

Adobe Reader and Acrobat products on Windows and macOS are affected by CVE-2016-6976, including Adobe Reader and Acrobat before 11.0.18, Acrobat/Reader DC Classic before 15.006.30243, and DC Continuous before 15.020.20039. The issue allows attackers to cause arbitrary code execution or memory cor...

CVE-2018-4886

CVE-2018-4886 affects Adobe Acrobat Reader and related Flash/EMF processing: the issue is a buffer overread in the image conversion engine when handling Enhanced Metafile Format (EMF) data, specifically with bitmap rectangles. This can cause sensitive data exposure. The affected products are Adob...

CVE-2018-4897

Adobe Acrobat Reader (version set: 2018.009.20050 and earlier; 2017.011.30070 and earlier; 2015.006.30394 and earlier) is affected by CVE-2018-4897 due to a boundary condition in the TIFF metadata image-conversion module that reads data past the end of the target buffer. A successful attack can l...

CVE-2018-4905

Technical details about CVE-2018-4905 are not publicly provided in the supplied documents. Monitor for updates from vendors and advisories for affected products and remediation guidance.

CVE-2025-64787

CVE-2025-64787 affects Adobe Acrobat/Reader on multiple versions (Reader: 24.001.30264, 20.005.30793, 25.001.20982, 24.001.30273, 20.005.30803 and earlier) due to an Improper Verification of Cryptographic Signature (CWE-347) vulnerability that could bypass security features and grant limited unau...

CVE-2004-1598

Adobe Acrobat and Acrobat Reader 6.0 are affected by an information-disclosure vulnerability where a PDF containing an embedded SWF can reference files outside the temporary directory, potentially exposing arbitrary files. The issue is triggered by the SWF file’s references, allowing access to lo...

CVE-2016-7854

Technical details about CVE-2016-7854 are not publicly provided in the connected documents. Monitor for updates; no product/impact specifics or remediation are given in the supplied materials.

CVE-2026-27220

Adobe Acrobat Reader is affected by a Use After Free flaw (CWE-416) in versions 24.001.30307, 24.001.30308, 25.001.21265 and earlier, potentially allowing arbitrary code execution in the current user context. Exploitation requires the user to open a malicious file. Remediation offered in sources ...

CVE-2016-6968

Technical details about CVE-2016-6968 are not publicly available in the provided connected documents. Monitor for updates.

CVE-2016-7005

Adobe Reader and Acrobat affected lines: before 11.0.18, Acrobat and Acrobat Reader DC Classic before 15.006.30243, and Acrobat and Acrobat Reader DC Continuous before 15.020.20039 on Windows and macOS are vulnerable due to a memory corruption issue. The CVE-2016-7005 entry indicates attackers ca...

CVE-2016-7852

Technical details (affected products/versions, root cause, impact or fixes) for CVE-2016-7852 are not provided in the connected documents. Monitor for updates and additional disclosures.

CVE-2018-4914

CVE-2018-4914 relates to Adobe Acrobat Reader/Acrobat Pro DC (and related builds) and involves an out-of-bounds read in the XPS TIFF processing path. The root cause is a computation reading data past the end of a target buffer during TIFF parsing in the XPS engine, which can lead to exposure of s...

CVE-2016-1129

Adobe Reader/Acrobat on Windows and macOS versions listed in CVE-2016-1129 are affected by a memory corruption issue that could allow arbitrary code execution or a denial of service via unspecified vectors. The vulnerable releases include Adobe Reader and Acrobat before 11.0.16, Acrobat/Reader DC...

CVE-2018-4909

Adobe Acrobat Reader CVE-2018-4909 affects versions 2018.009.20050 and earlier, 2017.011.30070 and earlier, and 2015.006.30394 and earlier. The flaw arises from computing on data past the end of a target buffer in the image conversion module when processing JPEG metadata, potentially exposing sen...

CVE-2026-47920

CVE-2026-47920 affects Adobe Acrobat Reader. Affected versions include 24.001.30365, 26.001.21651, and earlier. The issue is a Use-After-Free vulnerability in Acrobat Reader that could lead to arbitrary code execution in the context of the current user. Exploitation requires user interaction: the...

CVE-2026-48373

CVE-2026-48373 describes a heap-based buffer overflow in Acrobat Reader that could allow arbitrary code execution in the context of the current user. The vulnerability requires user interaction (victim opens a malicious file); no vector details are provided beyond this condition. The affected pro...

CVE-2025-47111

CVE-2025-47111 is a NULL pointer dereference in Adobe Acrobat Reader affecting version lines up to 25.001.20521 and earlier (e.g., 24.001.30235, 20.005.30763). The vulnerability can crash the application, causing a denial-of-service. Exploitation requires user interaction: a victim must open a ma...

CVE-2025-47112

CVE-2025-47112 affects Acrobat Reader 24.001.30235, 20.005.30763, 25.001.20521 and earlier. The issue is an out-of-bounds read vulnerability that could disclose sensitive memory and help bypass mitigations such as ASLR. Exploitation requires user interaction —the victim must open a malicious file...

CVE-2026-47912

CVE-2026-47912 affects Acrobat Reader versions 24.001.30365, 26.001.21651 and earlier. It is a Use After Free (CWE-416) vulnerability that can lead to arbitrary code execution in the context of the current user. Exploitation requires user interaction: the victim must open a crafted file. The conn...

CVE-2026-47924

Acrobat Reader is affected by CVE-2026-47924 (Use After Free, CWE-416). Affected versions include 24.001.30365 and 26.001.21651 and earlier. The issue arises from a Use After Free condition in Acrobat Reader, enabling disclosure of sensitive memory. The vulnerability requires user interaction, as...

CVE-2026-47959

CVE-2026-47959 affects Acrobat Reader versions 24.001.30365, 26.001.21651 and earlier. It is a stack-based buffer overflow (CWE-121) that could allow arbitrary code execution in the context of the current user. Exploitation requires user interaction (victim must open a malicious file). No exploit...

CVE-2026-27278

Adobe Acrobat Reader is affected by CVE-2026-27278 (Use After Free) enabling arbitrary code execution in the context of the user. Affected versions include 24.001.30307, 24.001.30308, 25.001.21265 and earlier; exploitation requires the user to open a malicious file. Red Hat and ENISA advisories c...

CVE-2026-47955

Acrobat Reader is affected by a Use After Free (CWE-416) vulnerability (CVE-2026-47955) in versions 24.001.30365, 26.001.21651 and earlier. The issue can lead to arbitrary code execution in the context of the current user. Exploitation requires user interaction: a victim must open a specially cra...

CVE-2025-64786

CVE-2025-64786 affects Adobe Acrobat Reader (versions including 24.001.30264, 20.005.30793, 25.001.20982, 24.001.30273, 20.005.30803 and earlier). The issue is Improper Verification of Cryptographic Signature, resulting in a Security feature bypass with limited unauthorized write access. Exploita...

CVE-2026-47917

CVE-2026-47917 affects Adobe Acrobat Reader (versions 24.001.30365, 26.001.21651 and earlier). The vulnerability is a Use After Free (CWE-416) in Acrobat Reader components that can lead to arbitrary code execution under the context of the current user. Exploitation requires user interaction: a vi...

CVE-2026-47921

Acrobat Reader is affected by a Use After Free (CWE-416) in versions 24.001.30365, 26.001.21651 and earlier, potentially allowing arbitrary code execution in the context of the current user. Exploitation requires user interaction (opening a malicious file). Root cause is use-after-free in the aff...

CVE-2025-64899

CVE-2025-64899 affects Adobe Acrobat/Reader versions including 24.001.30264, 20.005.30793, 25.001.20982, 24.001.30273, 20.005.30803 and earlier. It is an out-of-bounds read vulnerability triggered while parsing a crafted file, which could allow code execution in the context of the current user. E...

CVE-2026-47925

CVE-2026-47925 affects Acrobat Reader versions 24.001.30365, 26.001.21651 and earlier. It is an integer overflow/wraparound (CWE-190) vulnerability that can crash the application, causing a denial-of-service condition. Exploitation requires user interaction: a victim must open a malicious file. N...

CVE-2026-27221

CVE-2026-27221 affects Adobe Acrobat Reader up to version 25.001.21265 and earlier, with an Improper Certificate Validation vulnerability that could bypass security features and allow a signer identity spoof. Exploitation requires user interaction; affected components are Acrobat Reader’s certifi...

CVE-2026-79907

Acrobat Reader is affected by a Double Free vulnerability (CWE-415) that can lead to arbitrary code execution in the context of the current user. Exploitation requires user interaction: a victim must open a malicious file. The CVSS 3.1 score is 7.8 (HIGH) with a local attack vector, no privileges...

CVE-2026-81979

Acrobat Reader is affected by an out-of-bounds write (CWE-787) vulnerability that can lead to arbitrary code execution in the context of the current user. Exploitation requires user interaction , as the victim must open a malicious file. The CVSS v3.1 score is 7.8 (HIGH) with a local attack vecto...

CVE-2026-81994

Adobe Acrobat Reader is affected by a Prototype Pollution (CWE-1321) vulnerability that can lead to arbitrary file system read , allowing an attacker to access sensitive files and directories outside the intended access scope. Exploitation requires user interaction —a victim must open a malicious...

CVE-2026-81990

Adobe Acrobat Reader is affected by a Use After Free flaw (CWE-416) that can lead to arbitrary code execution in the context of the current user. Exploitation requires user interaction: a victim must open a malicious file . The CNA-assigned CVSS 3.1 score is 7.8 (High) with vector AV:L/AC:L/PR:N/...

CVE-2026-81996

Adobe Acrobat Reader is affected by an Incorrect Authorization vulnerability (CWE-863) that enables a low-privileged local attacker to escalate privileges and gain elevated access, with no user interaction required. The CVSS v3.1 score is 8.8 (HIGH) , with a vector of AV:L/AC:L/PR:L/UI:N/S:C/C:H/...

CVE-2026-80162

Adobe Acrobat Reader is affected by a Use After Free vulnerability (CWE-416) that can lead to disclosure of sensitive memory . Exploitation requires user interaction , specifically a victim opening a malicious file. The CVSS 3.1 score is 5.5 (Medium) , reflecting a local attack vector, low comple...

CVE-2026-79909

Adobe Acrobat Reader is affected by a Use After Free vulnerability (CWE-416) that could result in arbitrary code execution in the context of the current user. Exploitation requires user interaction , as a victim must open a malicious file. The CNA-assigned CVSS 3.1 score is 7.8 (HIGH) with a loca...

CVE-2026-81983

Acrobat Reader is affected by an out-of-bounds write vulnerability (CWE-787) that could lead to arbitrary code execution in the context of the current user. Exploitation requires user interaction , as a victim must open a malicious file. The CVSS v3.1 score is 7.8 (HIGH) , with a local attack vec...

CVE-2026-81987

Adobe Acrobat Reader is affected by an Integer Overflow or Wraparound vulnerability (CWE-190) that can lead to arbitrary code execution in the context of the current user. Exploitation requires user interaction : a victim must open a malicious file. The vulnerability is rated CVSS 3.1: 7.8 (HIGH)...

CVE-2026-79908

Adobe Acrobat Reader is affected by an out-of-bounds write (CWE-787) vulnerability that could allow arbitrary code execution in the context of the current user. Exploitation requires user interaction — a victim must open a malicious file. The CVSS 3.1 base score is 7.8 (HIGH) with a local attack ...

CVE-2026-79910

Acrobat Reader is affected by an out-of-bounds read vulnerability (CWE-125) that can lead to disclosure of sensitive memory . Exploitation requires user interaction — a victim must open a malicious file. The CVSS 3.1 score is 5.5 (MEDIUM) , reflecting a local attack vector with required user inte...

CVE-2026-81973

Adobe Acrobat Reader is affected by a Use After Free vulnerability (CWE-416) that could lead to arbitrary code execution in the context of the current user. Exploitation requires user interaction: a victim must open a malicious file . The CVSS v3.1 score is 7.8 (HIGH) with the vector AV:L/AC:L/PR...

CVE-2026-81981

Acrobat Reader is affected by an out-of-bounds write vulnerability (CWE-787) that could lead to arbitrary code execution in the context of the current user. Exploitation requires user interaction : a victim must open a malicious file. The assigned CVSS 3.1 score is 7.8 (HIGH) with a local attack ...

CVE-2026-81982

Adobe Acrobat Reader is affected by an out-of-bounds read vulnerability (CWE-125) that could lead to disclosure of sensitive memory . Exploitation requires user interaction —specifically, a victim must open a malicious file. The CVSS 3.1 score is 5.5 (MEDIUM) with a local attack vector, low compl...

CVE-2026-81986

Acrobat Reader is affected by a Use After Free vulnerability (CWE-416) that can lead to arbitrary code execution in the context of the current user. Exploitation requires user interaction —a victim must open a malicious file. The CVSS 3.1 base score is 7.8 (HIGH) , with a local attack vector, low...

CVE-2026-81991

Acrobat Reader is affected by an out-of-bounds read vulnerability (CWE-125) that could lead to disclosure of sensitive memory . Exploitation requires user interaction : a victim must open a malicious file. The CVSS 3.1 score is 5.5 (Medium) , reflecting a local attack vector with low complexity, ...

CVE-2026-80160

Adobe Acrobat Reader is affected by an out-of-bounds read (CWE-125) that can lead to disclosure of sensitive memory . Exploitation requires user interaction — a victim must open a crafted malicious file. The CVSS 3.1 score is 5.5 (Medium) , reflecting a local attack vector, low complexity, no req...

CVE-2026-80161

Acrobat Reader is affected by a Type Confusion vulnerability (CWE-843) that could lead to arbitrary code execution in the context of the current user. Exploitation requires user interaction , as the victim must open a malicious file. The CVSS 3.1 score is 7.8 (HIGH) with a local attack vector, no...