1382 matches found
CVE-2013-3351
CVE-2013-3351 corresponds to buffer-overflow vulnerabilities in Adobe Reader and Acrobat prior to versions 10.1.8 (Windows/Mac) and 11.x prior to 11.0.04. The NVD description cites multiple stack-based/buffer overflows that could allow arbitrary code execution via unspecified vectors. Public advi...
CVE-2012-1530
CVE-2012-1530 : A heap-based buffer overflow in the XSLT engine of Adobe Reader and Acrobat allows code execution or memory corruption via a PDF containing a crafted XSL that triggers lang() processing on XML data. Affected products include Adobe Reader/Acrobat 9.x prior to 9.5.3, 10.x prior to 1...
CVE-2012-4147
Technical details (affected products/versions, root cause, exploit vectors, or fixes) are not publicly provided in the supplied documents. Monitor for updates from official advisories.
CVE-2024-34122
CVE-2024-34122 affects Acrobat for Edge (Edge Chromium-based) up to version 126.0.2592.68, with an out-of-bounds read when parsing a crafted file that could allow code execution under the user’s context after user interaction. The issue is confirmed across multiple sources; a remediation exists a...
CVE-2024-41869
Adobe Acrobat/Reader across Windows, macOS, and related continuums (DC/Classic/Continuous) is affected by CVE-2024-41869 (Use-After-Free) and CVE-2024-45112 (Type Confusion), enabling arbitrary code execution in the context of the current user. Exploitation requires user interaction (opening a ma...
CVE-2013-5325
Summary of CVE-2013-5325 (Adobe Reader/Acrobat RCE) : The issue affects Adobe Reader and Acrobat 11.x on Windows prior to 11.0.05 , where a crafted PDF can cause a remote attacker to execute arbitrary JavaScript code via a javascript: URL. The underlying impact is remote code execution with full ...
CVE-2023-21586
CVE-2023-21586 — Adobe Acrobat Reader : NULL pointer dereference vulnerability affecting versions 22.003.20282 and earlier, 22.003.20281 and earlier, and 20.005.30418 and earlier. An unauthenticated attacker could cause an application denial-of-service, with exploit requiring user interaction (vi...
CVE-2020-29075
CVE-2020-29075 affects Adobe Acrobat/Reader (Acrobat Reader DC versions 2020.013.20066 and earlier, 2020.001.30010 and earlier, and 2017.011.30180 and earlier). The root cause is an information-disclosure vulnerability where two JavaScript functions perform DNS lookups when a PDF is loaded from t...
CVE-2011-0592
Technical details for CVE-2011-0592 are not publicly available in the provided documents; monitor for updates.
CVE-2022-44519
CVE-2022-44519 affects Acrobat Reader DC (versions 22.001.20085 and earlier, 20.005.3031x and earlier, 17.012.30205 and earlier). Root cause: a use-after-free in a component used when opening a malicious file, leading to possible disclosure of sensitive memory and the ability to bypass ASLR. Expl...
CVE-2009-1062
CVE-2009-1062 is part of a set of JBIG2/JavaScript-related flaws in Adobe Acrobat Reader. The description documents that multiple versions are affected: Acrobat Reader 9 before 9.1, 8 before 8.1.4, and 7 before 7.1.1, with memory corruption potentially leading to remote code execution via JBIG2 h...
CVE-2013-3356
The CVE-2013-3356 entry involves a buffer overflow in Adobe Reader and Acrobat prior to 10.1.8 and 11.x prior to 11.0.04 on Windows/Mac OS X that allows remote arbitrary code execution via unspecified vectors. Public sources (including APSB13-22) indicate patches were released by Adobe to address...
CVE-2024-30280
The CVE-2024-30280 entry affects Adobe Acrobat Reader (versions 20.005.30574, 24.002.20736 and earlier) and is an out-of-bounds read bug triggered while parsing a crafted file. An attacker could execute code in the user’s context, and exploitation requires user interaction (victim opens a malicio...
CVE-2012-4153
Technical details for CVE-2012-4153 are not publicly available in the provided connected documents. Monitor for updates; the materials reference the CVE family and other related CVEs but do not specify affected products, root cause, or remediation for this entry.
CVE-2022-28237
CVE-2022-28237 affects Acrobat Reader DC and related Adobe products. A use-after-free in the processing of annotations could allow arbitrary code execution in the context of the current user. Exploitation requires user interaction: a victim must open a malicious file. Affected versions include Ac...
CVE-2024-20765
CVE-2024-20765 affects Adobe Acrobat Reader variants on Windows and Mac (e.g., Reader DC classic 2020/Continuous; affected versions include 20.005.30539, 23.008.20470 and earlier). The issue is a Use-After-Free vulnerability in PDF handling that can lead to arbitrary code execution in the context...
CVE-2012-0776
CVE-2012-0776 affects Adobe Reader 9.x (before 9.5.1) and 10.x (before 10.1.3); the vulnerability lies in the installer bypassing access restrictions, enabling arbitrary code execution. Public sources (OpenVAS/NVD-derived advisories) also note concurrent issues across Acrobat/Reader on Windows, m...
CVE-2022-24101
CVE-2022-24101 is an Adobe Acrobat/Reader DC use-after-free information-disclosure vulnerability. Affected products include Acrobat Reader DC and related Acrobat/Reader versions listed in the sources, with exploitation requiring user interaction (victim opens a malicious file) and potential bypas...
CVE-2013-0624
CVE-2013-0624 affects Adobe Reader and Acrobat across multiple branches: Acrobat/Reader 9.x before 9.5.3, 10.x before 10.1.5, and 11.x before 11.0.1. The vulnerability is described as a bypass of intended access restrictions via unspecified vectors (a different vulnerability than CVE-2013-0622). ...
CVE-2011-4371
CVE-2011-4371 concerns Adobe Reader/Acrobat memory corruption via JavaScript heap handling in versions: Adobe Reader/Acrobat 9.x up to 9.5.0 and 10.x up to 10.1.2 (Windows and macOS). The underlying issue is a heap memory corruption vulnerability that could allow arbitrary code execution or a den...
CVE-2013-3355
CVE-2013-3355 affects Adobe Reader and Acrobat on Windows and macOS, with vulnerable builds prior to 10.1.8 and 11.x prior to 11.0.04. Multiple sources describe a memory-corruption vulnerability that can be triggered by parsing a specially crafted PDF, allowing remote code execution or a crash. C...
CVE-2022-35665
CVE-2022-35665 is a Use-After-Free vulnerability in Adobe Acrobat Reader affecting multiple legacy releases (e.g., 22.001.20169 and earlier; 20.005.30362 and earlier; 17.012.30249 and earlier). The underlying issue is a use-after-free in memory management that can lead to arbitrary code execution...
CVE-2022-44518
CVE-2022-44518 affects Adobe Acrobat Reader DC (and earlier/Classic variants) with a use-after-free vulnerability that could lead to arbitrary code execution in the current user context. The issue requires user interaction: a victim must open a malicious file. Public details list affected product...
CVE-2024-49533
CVE-2024-49533 affects Adobe Acrobat Reader family (DC/Classic/Continuous) versions including 24.005.20307, 24.001.30213, 24.001.30193, 20.005.30730, 20.005.30710 and earlier. The issue is an out-of-bounds read that could disclose sensitive memory and potentially bypass ASLR. Exploitation require...
CVE-2024-49534
CVE-2024-49534 affects Adobe Acrobat Reader versions including 24.005.20307, 24.001.30213, 24.001.30193, 20.005.30730, 20.005.30710 and earlier. The vulnerability is an out-of-bounds read that could disclose sensitive memory and potentially bypass ASLR. Exploitation requires user interaction (the...
CVE-2017-16384
The CVE-2017-16384 entry describes a buffer over-read in Adobe Acrobat/Reader (affecting 2017.012.20098 and earlier, 2017.011.30066 and earlier, 2015.006.30355 and earlier, and 11.0.22 and earlier) in the exif processing module for PNG files during XPS conversion. The vulnerability arises from in...
CVE-2022-44513
CVE-2022-44513 affects Adobe Acrobat Reader DC (versions including 22.001.20085 and earlier; 20.005.3031x and earlier; 17.012.30205 and earlier). The vulnerability is an out-of-bounds write in the processing of certain files that could lead to arbitrary code execution in the context of the curren...
CVE-2010-3654
CVE-2010-3654 affects Adobe Flash Player prior to 9.0.289.0 and pre-10.1.102.64 (Windows/macOS/Linux/Solaris) and Adobe Reader/Acrobat 9.x up to 9.4, with 10.1.95.1 on Android. The vulnerability allows remote code execution or memory corruption/DoS via crafted SWF content embedded in PDFs (exploi...
CVE-2014-0495
Affected software: Adobe Reader & Acrobat XI 11.0.05 and earlier, and Adobe Reader & Acrobat X 10.1.8 and earlier (Windows and macOS). Vulnerability details: CVE-2014-0495 is a memory corruption flaw in these products that can allow arbitrary code execution or denial of service via unspecified ve...
CVE-2022-34229
CVE-2022-34229 affects Adobe Acrobat Reader DC/Acrobat Reader with the AcroForm Use-After-Free vulnerability that allows arbitrary code execution in the current user context. Exploitation requires the user to open a crafted file; affected versions are older than 17.012.30249 (Acrobat/Reader Class...
CVE-2022-24102
CVE-2022-24102 is an Adobe Acrobat/Reader DC use-after-free vulnerability enabling arbitrary code execution in the context of the current user. Exploitation requires user interaction (opening a malicious file). Concrete details found in connected Nessus plugin: affected products include Acrobat R...
CVE-2023-44359
Technical details about CVE-2023-44359 are not publicly available in the provided documents; no affected product/version or impact is specified beyond the initial description. Monitor for updates.
CVE-2022-28236
CVE-2022-28236 (Adobe Acrobat/Reader DC). Affected products: Acrobat Reader DC 22.001.20085 and earlier; 20.005.3031x and earlier; 17.012.30205 and earlier. Vulnerability: out-of-bounds write in parsing that can lead to arbitrary code execution in the current user context. Exploitation requires u...
CVE-2023-44371
CVE-2023-44371 affects Adobe Acrobat Reader versions 23.006.20360 and 20.005.30524 (and earlier). The issue is a Use After Free in a component used during file handling, leading to arbitrary code execution in the context of the current user. exploitation requires user interaction (victim must ope...
CVE-2013-3357
CVE-2013-3357 : Adobe Reader/Acrobat on Windows and macOS suffers an integer overflow in versions before 10.1.8 and 11.x before 11.0.04, enabling arbitrary code execution via unspecified vectors. An advisory (APSB13-22) references this CVE and notes the vulnerability is distinct from CVE-2013-335...
CVE-2022-44512
Adobe Acrobat Reader DC is affected by out-of-bounds write (CWE-787) in parsing that could lead to arbitrary code execution in the current user context. Affected versions include 22.001.20085 and earlier, 20.005.3031x and earlier, and 17.012.30205 and earlier. Exploitation requires user interacti...
CVE-2024-39379
Technical details for CVE-2024-39379 are not publicly available in the provided documents. Monitor for updates from official advisories to confirm affected products, impact, and fixes.
CVE-2009-1492
CVE-2009-1492 concerns Adobe Reader/Acrobat JavaScript API. The vulnerability affects the getAnnots Doc method in the JavaScript API of Adobe Reader and Acrobat 9.1, 8.1.4, 7.1.1, and earlier. A PDF containing an annotation with an OpenAction entry invoking this method using crafted integer argum...
CVE-2022-27800
The CVE-2022-27800 entry describes a use-after-free flaw in Adobe Acrobat/Reader DC related to annotation processing. Affected products include Acrobat Reader DC (versions 22.001.20085 and earlier), 20.005.3031x and 17.012.30205 and earlier. The vulnerability allows arbitrary code execution in th...
CVE-2022-34216
Adobe Acrobat Reader DC/Classic products are affected by CVE-2022-34216 and related CVEs (e.g., 34219/34220/34223/34224/34225/34227/34229/34230/34228) describing a Use-After-Free condition in parsing of PDF content that can lead to arbitrary code execution in the context of the current user. Expl...
CVE-2023-44366
Adobe Acrobat Reader versions 23.006.20360 and earlier, and 20.005.30524 and earlier, are affected by an out-of-bounds write vulnerability that could lead to arbitrary code execution in the user's context when a malicious file is opened. This CVE (CVE-2023-44366) is documented with a high impact ...
CVE-2022-28238
CVE-2022-28238 affects Acrobat Reader DC and related Adobe products on multiple versions (e.g., 22.001.20085 and earlier, 20.005.3031x and earlier, 17.012.30205 and earlier). The vulnerability is a use-after-free in the processing of annotations that could allow arbitrary code execution in the co...
CVE-2022-28243
CVE-2022-28243 concerns an out-of-bounds read in Acrobat Reader DC when parsing a crafted file, potentially allowing code execution in the user’s context. Affected are Acrobat Reader DC 22.001.2011x and earlier, 20.005.3033x and earlier, and 17.012.3022x and earlier. The issue requires user inter...
CVE-2022-35666
Adobe Acrobat Reader is affected by CVE-2022-35666 (and related CVEs) due to an Improper Input Validation vulnerability that could lead to arbitrary code execution in the context of the current user. Affected are multiple products/versions including 22.001.20169 and earlier, 20.005.30362 and earl...
CVE-2021-40728
CVE-2021-40728 is a use-after-free in Adobe Acrobat Reader DC’s GetURL handling on a global window object, capable of arbitrary code execution in the current user context. Affected versions (as documented): 21.007.20095 and earlier, 21.007.20096 and earlier, 20.004.30015 and earlier, and 17.011.3...
CVE-2022-27785
Adobe Acrobat Reader DC and related versions are affected by a use‑after‑free vulnerability in font processing that can lead to arbitrary code execution in the context of the current user. Exploitation requires user interaction, typically by opening a crafted file. Affected versions include Acrob...
CVE-2022-28250
Adobe Acrobat Reader DC/Acrobat-related components are affected by a use-after-free vulnerability that can disclose memory and bypass ASLR. Affected versions include Acrobat Reader DC 22.001.2011x and earlier, 20.005.3033x and earlier, and 17.012.3022x and earlier. Exploitation requires user inte...
CVE-2022-28242
Technical details for CVE-2022-28242 are not provided in the supplied documents. No affected products, impact, or fixes are disclosed here. Monitor official advisories and vendor updates for public details and remediation.
CVE-2023-44338
Adobe Acrobat Reader versions 23.006.20360 (and earlier) and 20.005.30524 (and earlier) are affected by an out-of-bounds read when parsing a crafted file, potentially allowing code execution in the caller’s context. Exploitation requires user interaction (victim must open a malicious file). The c...