CVE-2022-34215

Technical details about CVE-2022-34215 are not publicly provided in the connected documents. Monitor for updates as more specifics (affected products, versions, and fixes) may be published by vendors.

CVE-2023-44338

Adobe Acrobat Reader versions 23.006.20360 (and earlier) and 20.005.30524 (and earlier) are affected by an out-of-bounds read when parsing a crafted file, potentially allowing code execution in the caller’s context. Exploitation requires user interaction (victim must open a malicious file). The c...

CVE-2021-39859

CVE-2021-39859 affects Adobe Acrobat/Reader DC: Acrobat Reader DC versions 2021.005.20060 and earlier, 2020.004.30006 and earlier, and 2017.011.30199 and earlier are vulnerable to a Use-After-Free that can disclose sensitive memory and bypass ASLR. Exploitation requires user interaction (victim m...

CVE-2022-27785

Adobe Acrobat Reader DC and related versions are affected by a use‑after‑free vulnerability in font processing that can lead to arbitrary code execution in the context of the current user. Exploitation requires user interaction, typically by opening a crafted file. Affected versions include Acrob...

CVE-2022-28232

CVE-2022-28232 affects Adobe Acrobat Reader DC and related Acrobat/Reader components. A use-after-free vulnerability in the processing of the collab object can allow arbitrary code execution in the context of the current user. Exploitation requires user interaction: a victim must open a malicious...

CVE-2022-28242

Technical details for CVE-2022-28242 are not provided in the supplied documents. No affected products, impact, or fixes are disclosed here. Monitor official advisories and vendor updates for public details and remediation.

CVE-2024-20731

CVE-2024-20731 affects Adobe Acrobat Reader (DC/Continuous) versions 20.005.30539, 23.008.20470 and earlier. It is described as a Use-After-Free in PDAnnot destroy that can lead to arbitrary code execution in the context of the current user, requiring user interaction (victim opens a malicious fi...

CVE-2022-27797

CVE-2022-27797 affects Acrobat Reader DC and related Adobe products. A use-after-free in the processing of annotations can allow arbitrary code execution in the context of the current user. Affected versions include Acrobat Reader DC 22.001.20085 and earlier, 20.005.3031x and earlier, and 17.012....

CVE-2022-28265

Adobe Acrobat Reader DC and related Acrobat components are affected by an out-of-bounds read when parsing crafted PDF files, potentially allowing memory reads past bounds and bypassing ASLR. Affected versions include Acrobat Reader DC 22.001.2011x and earlier, 20.005.3033x and earlier, and 17.012...

CVE-2022-27799

CVE-2022-27799 is an Acrobat Reader DC use-after-free vulnerability in the acroform event processing that could allow arbitrary code execution in the context of the current user. Affected versions include Acrobat Reader DC 22.001.20085 and earlier, 20.005.3031x and earlier, and 17.012.30205 and e...

CVE-2022-28230

CVE-2022-28230 affects Adobe Acrobat Reader DC and related Acrobat/Reader builds. It is a use-after-free in the acroform event processing that can lead to arbitrary code execution in the context of the current user. Exploitation requires user interaction (open a malicious file). Affected versions...

CVE-2023-44360

CVE-2023-44360 affects Adobe Acrobat Reader, versions 23.006.20360 and earlier (and 20.005.30524 and earlier). The issue is an out-of-bounds read that can disclose sensitive memory and could bypass ASLR. Exploitation requires user interaction (victim opening a malicious file). Adobe’s advisory AP...

CVE-2023-44365

CVE-2023-44365 affects Adobe Acrobat Reader (versions 23.006.20360 and earlier, and 20.005.30524 and earlier). The issue is an Access of Uninitialized Pointer leading to possible arbitrary code execution under the current user . Exploitation requires user interaction (victim must open a malicious...

CVE-2024-20721

CVE-2024-20721 affects Acrobat Reader T5 (MSFT Edge) versions 120.0.2210.91 and earlier. The root cause is improper input validation. In the described vulnerability, an unauthenticated attacker can cause an application DoS in the context of the current user, with exploitation requiring user inter...

CVE-2017-11263

Adobe Acrobat Reader 2017 (and earlier) is affected by a memory corruption vulnerability in internal data structure manipulation related to document encoding, which could allow arbitrary code execution on successful exploitation. The CVE entry lists affected products/versions such as Acrobat Read...

CVE-2021-39863

CVE-2021-39863 affects Adobe Acrobat Reader DC variants including 2021.005.20060 (and earlier), 2020.004.30006 (and earlier), and 2017.011.30199 (and earlier). The issue is a heap/buffer overflow triggered while parsing a specially crafted PDF, leading to arbitrary code execution in the context o...

CVE-2022-28239

CVE-2022-28239 affects Adobe Acrobat/Reader products. An out-of-bounds read occurs while parsing a crafted PDF/file, allowing code execution in the context of the current user. Impacts target Acrobat Reader DC (versions 22.001.2011x and earlier; 20.005.3033x and earlier; 17.012.3022x and earlier)...

CVE-2023-21604

Adobe Acrobat/Reader is affected by a stack-based buffer overflow (CVE-2023-21604) in versions 22.003.20282 and earlier, 22.003.20281 and earlier, and 20.005.30418 and earlier. The issue can lead to arbitrary code execution in the context of the current user and requires the victim to open a mali...

CVE-2023-44340

Adobe Acrobat Reader suffers an out-of-bounds read (CVE-2023-44340) that could disclose memory and bypass ASLR. Affected: versions 23.006.20360 and earlier, 20.005.30524 and earlier. Exploitation requires user interaction (opening a malicious file). Root cause: out-of-bounds read; impact: confide...

CVE-2021-21038

Technical details for CVE-2021-21038 are not publicly disclosed in the provided Connected documents. No concrete affected products, root cause, impact, or fixes are included here. Monitor for official updates from vendors or CERT advisories.

CVE-2022-27794

CVE-2022-27794 affects Adobe Acrobat Reader DC and related products, where a variable not initialized while parsing embedded fonts can lead to arbitrary code execution in the context of the current user. The exploitation requires user interaction (the user must open a crafted PDF). Affected produ...

CVE-2022-28263

CVE-2022-28263 affects Adobe Acrobat/Reader components on Windows and related platforms: out-of-bounds read when parsing a crafted file, potentially bypassing ASLR. Successful exploitation requires user interaction (opening a malicious file). Affected product families include Acrobat Reader DC/Co...

CVE-2023-44339

CVE-2023-44339 affects Adobe Acrobat Reader/Classic: an out-of-bounds read could disclose memory and bypass ASLR. Affected versions include 23.006.20360 and earlier, and 20.005.30524 and earlier. Exploitation requires user interaction (opening a malicious file). Connected documents do not provide...

CVE-2023-44358

CVE-2023-44358 affects Adobe Acrobat Reader up to versions 23.006.20360 and 20.005.30524 and earlier. It is an out-of-bounds read vulnerability that can disclose memory and potentially bypass ASLR. Exploitation requires the user to open a malicious file, making it a user-interaction–dependent iss...

CVE-2023-44367

Technical details for CVE-2023-44367 are not publicly provided in the connected documents. The initial description lists affected products and impact but does not include root cause, affected versions beyond those stated, or remediation specifics. Monitor for updates.

CVE-2022-28262

CVE-2022-28262 affects Adobe Acrobat Reader DC (and related Acrobat/Reader builds) where parsing a crafted file can trigger an out-of-bounds read, potentially allowing bypass of mitigations such as ASLR. Affected versions include Acrobat Reader DC 22.001.2011x and earlier, 20.005.3033x and earlie...

CVE-2022-28240

CVE-2022-28240 affects Adobe Acrobat Reader DC and Acrobat/Reader versions listed in the NVD entry, due to a use-after-free flaw that could allow arbitrary code execution in the context of the current user. Exploitation requires the user to open a malicious file. The advisory suggests updating to...

CVE-2022-34234

CVE-2022-34234 affects Adobe Acrobat Reader DC/Classic versions prior to the listed fixed releases (e.g., 22.001.20142 and earlier 20.005.30334 and 17.012.30229 families) with a Use-After-Free vulnerability that can lead to disclosure of memory and bypass mitigation like ASLR. Root cause: use-aft...

CVE-2022-28241

CVE-2022-28241 affects Adobe Acrobat Reader DC and related Acrobat/Reader builds (e.g., 22.001.2011x and earlier, 20.005.3033x and earlier, 17.012.3022x and earlier). The issue is an out-of-bounds read during parsing of a crafted PDF/file, which can result in a read past the end of an allocated m...

CVE-2022-44520

CVE-2022-44520 affects Adobe Acrobat/Reader: Acrobat Reader DC versions 22.001.20085 and earlier, 20.005.3031x and earlier, and 17.012.30205 and earlier. It is a use‑after‑free vulnerability that could allow arbitrary code execution in the context of the current user. Exploitation requires user i...

CVE-2023-22241

CVE-2023-22241 affects Adobe Acrobat Reader DC and related builds. It is an out-of-bounds write vulnerability that could lead to arbitrary code execution in the context of the current user. Exploitation requires the user to open a malicious file. Affected versions include 22.003.20282 (and earlie...

CVE-2023-44348

Adobe Acrobat Reader DC/Classic is affected by an out-of-bounds read in versions 23.006.20360 and earlier (Reader) and 20.005.30524 and earlier (Classic). The flaw could disclose sensitive memory and bypass ASLR; exploitation requires user interaction (opening a malicious file). Adobe issued APSB...

CVE-2022-28234

Technical details about CVE-2022-28234 are not publicly available in the provided connected documents; please monitor for updated advisories or patch information.

CVE-2024-45112

CVE-2024-45112 affects Adobe Acrobat Reader DC/Classic (e.g., versions 24.002.21005, 24.001.30159, 20.005.30655, 24.003.20054 and earlier). The issue is a Type Confusion vulnerability: an object is accessed with an incompatible type, causing a logic error that can lead to arbitrary code execution...

CVE-2014-9160

Adobe Reader/Acrobat on Windows and macOS is vulnerable to multiple heap-based buffer overflows in CoolType.dll, triggered by crafted PDF files. Affected products include Adobe Reader and Acrobat 10.x prior to 10.1.14 and 11.x prior to 11.0.11, with CVEs including CVE-2014-9160, CVE-2014-9161 and...

CVE-2021-21044

CVE-2021-21044 affects Acrobat Reader DC: versions 2020.013.20074 and earlier, 2020.001.30018 and earlier, and 2017.011.30188 and earlier. It is an out-of-bounds write when parsing a crafted JPEG file, allowing an unauthenticated attacker to achieve arbitrary code execution in the context of the ...

CVE-2021-45068

CVE-2021-45068 affects Adobe Acrobat Reader DC and related products with an out-of-bounds write in font parsing that can lead to arbitrary code execution in the context of the current user. Exploitation requires user interaction (victim opens a malicious file). Affected versions include Acrobat R...

CVE-2022-34228

Adobe Acrobat Reader and related components are affected by CVE-2022-34228, an Access of Uninitialized Pointer vulnerability in multiple versions (e.g., 22.001.20142 and earlier; 20.005.30334 and earlier; 17.012.30229 and earlier). The issue can lead to arbitrary code execution in the context of ...

CVE-2023-26418

Technical details for CVE-2023-26418 are not publicly available in the provided documents; monitor for updates.

CVE-2023-44357

CVE-2023-44357 affects Adobe Acrobat Reader versions 23.006.20360 (and earlier) and 20.005.30524 (and earlier). It is an out-of-bounds read vulnerability that can lead to disclosure of sensitive memory and may bypass mitigations such as ASLR. Exploitation requires user interaction: a victim must ...

CVE-2023-44361

CVE-2023-44361 affects Adobe Acrobat Reader versions 23.006.20360 and earlier, and 20.005.30524 and earlier. It is a Use-After-Free vulnerability that can disclose sensitive memory and bypass mitigations such as ASLR. Exploitation requires user interaction (the victim must open a malicious file)....

CVE-2022-28251

CVE-2022-28251 affects Acrobat Reader DC (versions 22.001.2011x and earlier, 20.005.3033x and earlier, 17.012.3022x and earlier). The issue is an out-of-bounds read when parsing a crafted file, which can lead to reading beyond allocated memory and potentially bypass ASLR. Exploitation requires us...

CVE-2022-34222

CVE-2022-34222 affects Adobe Acrobat Reader DC/Continuous and certain older versions (22.001.20142 and earlier; 20.005.30334 and earlier; 17.012.30229 and earlier). The issue is an out-of-bounds read when parsing a crafted file, potentially allowing code execution in the user’s context. Exploitat...

CVE-2015-3052

CVE-2015-3052 (BLEND) is a memory-disclosure/heap manipulation vulnerability in PostScript/OpenType charstring handling that enables fully reliable remote code execution on vulnerable 32-bit systems. Project Zero describes it as a defeat of exploit mitigations via the BLEND operator: loading a si...

CVE-2022-27787

CVE-2022-27787 affects Acrobat Reader DC and related Acrobat products, caused by an out-of-bounds write in font parsing that could lead to arbitrary code execution under the current user. Affected: Acrobat Reader DC 22.001.20085 and earlier, 20.005.3031x and earlier, 17.012.30205 and earlier. Exp...

CVE-2022-27802

CVE-2022-27802 affects Adobe Acrobat Reader DC and related products (versions 22.001.20085 and earlier; 20.005.3031x and earlier; 17.012.30205 and earlier) with a use-after-free vulnerability in annotation processing that could allow arbitrary code execution in the user’s context. Exploitation re...

CVE-2022-28267

CVE-2022-28267 affects Adobe Acrobat Reader DC and related products when parsing a crafted file, causing an out-of-bounds read that can bypass ASLR. Affected versions include Acrobat Reader DC 22.001.2011x and earlier, 20.005.3033x and earlier, and 17.012.3022x and earlier. The issue requires use...

CVE-2021-44709

CVE-2021-44709 affects Adobe Acrobat/Reader DC versions 21.007.20099 and earlier, 20.004.30017 and earlier, and 17.011.30204 and earlier. The issue is a heap overflow caused by insecure handling of a crafted file, potentially enabling arbitrary code execution in the current user’s context. Exploi...

CVE-2022-28233

Adobe Acrobat Reader DC affected by a use-after-free in processing annotations, enabling arbitrary code execution in the current user context. Affected products include Acrobat Reader DC versions 22.001.20085 and earlier, 20.005.3031x and earlier, and 17.012.30205 and earlier; exploitation requir...

CVE-2022-28244

CVE-2022-28244 (Adobe Acrobat/Reader DC CSP Bypass) affects Acrobat Reader DC with versions up to 22.001.20085, 20.005.3031x, and 17.012.30205 (and earlier). The issue is a violation of secure design principles: bypassing the Content Security Policy, which could let an attacker trigger arbitraril...