CVE-2021-21088

Adobe Acrobat Reader DC is affected by a Use-After-Free vulnerability (CVE-2021-21088) that could allow arbitrary code execution in the current user’s context. Affected versions include 2020.013.20074 and earlier, 2020.001.30018 and earlier, and 2017.011.30188 and earlier. Exploitation requires u...

CVE-2022-28233

Adobe Acrobat Reader DC affected by a use-after-free in processing annotations, enabling arbitrary code execution in the current user context. Affected products include Acrobat Reader DC versions 22.001.20085 and earlier, 20.005.3031x and earlier, and 17.012.30205 and earlier; exploitation requir...

CVE-2022-28252

Adobe Acrobat Reader DC is affected by an out-of-bounds read vulnerability when parsing a crafted file in versions 22.001.2011x and earlier, 20.005.3033x and earlier, and 17.012.3022x and earlier. Exploitation could bypass ASLR and requires user interaction (victim must open a malicious file). Re...

CVE-2022-28255

CVE-2022-28255 affects Acrobat Reader DC: versions 22.001.2011x and earlier, 20.005.3033x and earlier, and 17.012.3022x and earlier. Root cause is an out-of-bounds read when parsing a crafted file, potentially bypassing ASLR. Exploitation requires user interaction (victim opens a malicious file)....

CVE-2022-28259

Technical details for CVE-2022-28259 are not publicly available in the provided documents. Monitor for updates.

CVE-2022-38437

CVE-2022-38437 affects Adobe Acrobat Reader versions 22.002.20212 and earlier, and 20.005.30381 and earlier. The issue is a Use After Free vulnerability that could disclose memory contents and bypass mitigations such as ASLR. Exploitation requires user interaction (the victim must open a maliciou...

CVE-2023-44337

Adobe Acrobat Reader (versions 23.006.20360 and earlier; 20.005.30524 and earlier) is affected by an out-of-bounds read when parsing a crafted file, potentially allowing code execution in the user's context. Exploitation requires user interaction (opening a malicious file). The issue is tracked a...

CVE-2023-44356

Adobe Acrobat Reader versions 23.006.20360 and earlier (and 20.005.30524 and earlier) are affected by an out-of-bounds read that could disclose sensitive memory and bypass ASLR. Exploitation requires user interaction (victim opens a malicious file). No remediation details are provided in the supp...

CVE-2022-28267

CVE-2022-28267 affects Adobe Acrobat Reader DC and related products when parsing a crafted file, causing an out-of-bounds read that can bypass ASLR. Affected versions include Acrobat Reader DC 22.001.2011x and earlier, 20.005.3033x and earlier, and 17.012.3022x and earlier. The issue requires use...

CVE-2022-34228

Adobe Acrobat Reader and related components are affected by CVE-2022-34228, an Access of Uninitialized Pointer vulnerability in multiple versions (e.g., 22.001.20142 and earlier; 20.005.30334 and earlier; 17.012.30229 and earlier). The issue can lead to arbitrary code execution in the context of ...

CVE-2024-20735

CVE-2024-20735 affects Adobe Acrobat Reader/DC clients (e.g., Acrobat Reader versions 20.005.30539, 23.008.20470 and earlier) via an out-of-bounds read that can disclose memory contents and bypass ASLR. Exploitation requires user interaction (victim opens a malicious file); impact is confidential...

CVE-2014-9160

Adobe Reader/Acrobat on Windows and macOS is vulnerable to multiple heap-based buffer overflows in CoolType.dll, triggered by crafted PDF files. Affected products include Adobe Reader and Acrobat 10.x prior to 10.1.14 and 11.x prior to 11.0.11, with CVEs including CVE-2014-9160, CVE-2014-9161 and...

CVE-2022-28251

CVE-2022-28251 affects Acrobat Reader DC (versions 22.001.2011x and earlier, 20.005.3033x and earlier, 17.012.3022x and earlier). The issue is an out-of-bounds read when parsing a crafted file, which can lead to reading beyond allocated memory and potentially bypass ASLR. Exploitation requires us...

CVE-2022-28268

Acrobat Reader DC and related Adobe Acrobat/Reader versions (DC: 22.001.20085 and earlier; 20.005.3031x and earlier; 17.012.30205 and earlier) are affected by an out-of-bounds read vulnerability that can disclose memory and bypass ASLR. Exploitation requires user interaction (victim opens a craft...

CVE-2022-44514

CVE-2022-44514 : Acrobat Reader DC (versions 22.001.20085 and earlier; 20.005.3031x and earlier; 17.012.30205 and earlier) is affected by a use‑after‑free vulnerability that can cause arbitrary code execution in the current user context. Exploitation requires the user to open a malicious file, en...

CVE-2017-3036

CVE-2017-3036 affects Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, and 15.023.20070 and earlier, with an exploitable memory corruption vulnerability in the PCX image format processing. The issue is triggered during image conversion and could lead to arbitrary code ...

CVE-2017-3122

CVE-2017-3122 affects Adobe Acrobat Reader (2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier). The issue is a memory corruption in the image conversion engine when processing Enhanced Metafile Format (EMF) data related to Bezier curves, w...

CVE-2022-28254

CVE-2022-28254 (Adobe Acrobat/Reader DC) is an out-of-bounds read vulnerability in the PDF parsing path that can bypass ASLR. Affected products include Acrobat Reader DC 22.001.2011x and earlier, 20.005.3033x and earlier, and 17.012.3022x and earlier. Exploitation requires the user to open a mali...

CVE-2022-34217

CVE-2022-34217 affects Adobe Acrobat/Reader. Root cause: Out-Of-Bounds Write in font parsing, enabling arbitrary code execution in the context of the current user. Exploitation requires user interaction (victim opens a malicious file). Affected versions include Acrobat Reader 22.001.20142 and ear...

CVE-2010-2884

CVE-2010-2884 affects Adobe Flash Player 10.1.82.76 and earlier (Windows, macOS, Linux, Solaris) and 10.1.92.10 on Android, plus authplay.dll in Adobe Reader/Acrobat 9.x (before 9.4) and 8.x (before 8.2.5). The vulnerability enables remote code execution or memory corruption via unspecified vecto...

CVE-2014-0493

CVE-2014-0493 affects Adobe Reader/Acrobat XI 11.0.05 and earlier and Reader X 10.1.8 and earlier on Windows/macOS. A memory corruption flaw arises from incorrect memory buffer allocation while parsing a corrupted PDF, per APSB14-01, enabling arbitrary code execution or DoS. Remediation: update t...

CVE-2021-44709

CVE-2021-44709 affects Adobe Acrobat/Reader DC versions 21.007.20099 and earlier, 20.004.30017 and earlier, and 17.011.30204 and earlier. The issue is a heap overflow caused by insecure handling of a crafted file, potentially enabling arbitrary code execution in the current user’s context. Exploi...

CVE-2022-27796

CVE-2022-27796 affects Adobe Acrobat/Reader DC (versions 22.001.20085 and earlier; 20.005.3031x and earlier; 17.012.30205 and earlier) and is caused by a use-after-free in processing of the acroform event, enabling arbitrary code execution in the user’s context. Exploitation requires user interac...

CVE-2022-28231

CVE-2022-28231 affects Adobe Acrobat Reader DC and related Acrobat/Reader versions: an out-of-bounds read during doc object processing could allow code execution in the user’s context. A victim must open a crafted file for exploitation, requiring user interaction. Affected versions include Acroba...

CVE-2022-28253

CVE-2022-28253 is an Adobe Acrobat/Reader DC out-of-bounds read vulnerability affecting multiple older builds of Acrobat Reader DC and Acrobat/Reader Classic lines (e.g., 22.001.2011x, 20.005.3033x, 17.012.3022x and earlier) when parsing a crafted file. The issue can allow reading past the end of...

CVE-2022-34236

CVE-2022-34236 is an information-disclosure vulnerability in Adobe Acrobat Reader DC/Continuous, caused by a font-parsing out-of-bounds read that could leak memory. Affected are various versions (Reader/DC continuous and prior releases) with exploitation requiring user interaction to open a malic...

CVE-2021-21021

CVE-2021-21021 affects Adobe Acrobat Reader DC. It is a Use-After-Free vulnerability in PDF handling that could enable arbitrary code execution in the context of the current user. Exploitation requires user interaction (victim opens a malicious file). Affected versions include 2020.013.20074 and ...

CVE-2021-45067

Summary: CVE-2021-45067 affects Adobe Acrobat Reader DC and older builds (21.007.20099 and earlier; 20.004.30017 and earlier; 17.011.30204 and earlier) with an Access of Memory Location After End of Buffer that could disclose memory contents and potentially bypass ASLR. Exploitation requires user...

CVE-2022-27795

CVE-2022-27795 affects Adobe Acrobat Reader DC and related Acrobat/Reader versions prior to the fixed releases. The issue is a use-after-free vulnerability in the processing of the acroform event that could allow arbitrary code execution in the current user context. Exploitation requires user int...

CVE-2022-28249

CVE-2022-28249 affects Acrobat Reader DC and related Adobe products (versions listed) with an out-of-bounds read during parsing of a crafted PDF/file, allowing a read past the end of a memory structure and potentially bypassing ASLR. Exploitation requires user interaction (victim must open a mali...

CVE-2022-28257

CVE-2022-28257 affects Adobe Acrobat/Reader products (e.g., Acrobat Reader DC and related classic/continuous lines) with an out-of-bounds read when parsing a crafted file, potentially bypassing ASLR. Affected versions include Acrobat Reader DC 22.001.2011x and earlier, 20.005.3033x and earlier, a...

CVE-2022-28264

CVE-2022-28264 affects Adobe Acrobat/Reader on multiple lines of versions: Acrobat Reader DC 22.001.2011x (and earlier), 20.005.3033x (and earlier) and 17.012.3022x (and earlier). The issue is an out-of-bounds read when parsing a crafted file, which can cause a read past the end of an allocated m...

CVE-2024-20730

Public description states an Integer Overflow/Wraparound in Adobe Acrobat Reader (versions 20.005.30539, 23.008.20470 and earlier) could lead to arbitrary code execution with user interaction. No additional technical details are provided in the connected documents.

CVE-2014-8452

CVE-2014-8452 is an XML External Entity (XXE) information-disclosure flaw in Adobe Reader/Acrobat. Connected sources confirm the issue affects Adobe Reader X/XI prior to 10.1.14/11.0.11, with the root cause being improper XML/ENTITY handling in the product’s XML parser. Public advisories (APSB15-...

CVE-2017-11232

CVE-2017-11232 affects Adobe Acrobat Reader versions 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier. The vulnerability is a use-after-free in EMF data handling related to brush manipulation, which could lead to arbitrary code execution ...

CVE-2021-40723

CVE-2021-40723 affects Adobe Acrobat Reader DC: out-of-bounds read could disclose memory and bypass mitigations like ASLR. A victim must open a malicious file to exploit. Affected versions include 2020.013.20074 and earlier, 2020.001.30018 and earlier, and 2017.011.30188 and earlier. No remediati...

CVE-2021-44701

CVE-2021-44701 affects Acrobat Reader DC and related Windows/macOS builds (versions 21.007.20099 and earlier, 20.004.30017 and earlier, 17.011.30204 and earlier) via a use-after-free in the processing of Format event actions, enabling arbitrary code execution in the user context. Exploitation req...

CVE-2022-28258

CVE-2022-28258 affects Adobe Acrobat/Reader: an out-of-bounds read during parsing of crafted files can read past allocated memory, potentially bypassing ASLR. Affected are Acrobat Reader DC 22.001.2011x and earlier, Acrobat Reader/Classic 20.x 20.005.3033x and earlier, and Acrobat/Reader 17.x 17....

CVE-2022-28261

Vulnerability summary: Acrobat Reader DC and related Adobe products suffer an out-of-bounds read when parsing a crafted file, potentially allowing bypass of mitigations such as ASLR. Affected software (examples from sources): Acrobat Reader DC 22.001.2011x and earlier; 20.005.3033x and earlier; 1...

CVE-2022-34233

Summary: CVE-2022-34233 is a Use-After-Free flaw in Adobe Acrobat Reader versions up to 22.001.20142 (and earlier), 20.005.30334 (and earlier), and 17.012.30229 (and earlier). The issue can disclose memory and bypass ASLR, with exploitation requiring user interaction (open a malicious file). Conn...

CVE-2022-35691

Adobe Acrobat Reader/DC Classic and related products (e.g., Acrobat Reader DC Continuous) are affected by CVE-2022-35691, a NULL Pointer Dereference that could allow a denial-of-service under the context of the current user. The issue is triggered when a user opens a malicious file, requiring use...

CVE-2024-34094

Technical details about CVE-2024-34094 are not publicly available in the provided connected documents. Monitor for updates. If needed, refer to the initial description for the high-level impact (Use After Free causing arbitrary code execution with user interaction).

CVE-2012-2051

CVE-2012-2051 affects Adobe Reader and Acrobat 9.x before 9.5.2 and 10.x before 10.1.4 on Windows and macOS, enabling attackers to execute arbitrary code or cause a memory corruption denial of service via unspecified vectors. This is described as a different vulnerability from CVE-2012-4147 throu...

CVE-2013-0603

CVE-2013-0603 affects Adobe Reader/Acrobat 9.x prior to 9.5.3, 10.x prior to 10.1.5, and 11.x prior to 11.0.1, by a heap-based buffer overflow that allows arbitrary code execution via unspecified vectors. The issue is described as a heap overflow in the PDF handling workflow, with updates solving...

CVE-2016-0935

CVE-2016-0935 is a double-free vulnerability in Adobe Reader and Acrobat allowing remote code execution via a crafted ExtGState dictionary. Affected products include Adobe Reader and Acrobat before 11.0.14, Acrobat/Reader DC Classic before 15.006.30119, and Acrobat/Reader DC Continuous before 15....

CVE-2017-11216

Technical details for CVE-2017-11216 are not publicly available in the provided documents. Monitor for updates; the sources reference multiple Acrobat vulnerabilities but do not specify this CVE’s affected product/version, root cause, or fix.

CVE-2021-28551

CVE-2021-28551 affects Adobe Acrobat Reader DC family: versions 2021.001.20155 and earlier, 2020.001.30025 and earlier, and 2017.011.30196 and earlier. The issue is an Out-of-bounds read leading to arbitrary code execution in the context of the current user. It is exploitable by an unauthenticate...

CVE-2021-44741

Adobe Acrobat Reader DC is affected by CVE-2021-44741: a NULL pointer dereference when parsing a specially crafted file. This allows an unauthenticated attacker to cause an application denial-of-service in the context of the current user, with exploitation requiring user interaction (victim must ...

CVE-2022-27791

Adobe Acrobat Reader DC CVE-2022-27791 is a stack-based buffer overflow in font processing that can lead to arbitrary code execution under the current user. Affected versions include 22.001.20085 and earlier; 20.005.3031x and earlier; 17.012.30205 and earlier. Exploitation requires user interacti...

CVE-2022-35678

CVE-2022-35678 affects Adobe Acrobat Reader DC/Classic products with an out-of-bounds read flaw that can disclose memory contents. The issue, triggered by opening a malicious file, could bypass ASLR and requires user interaction. Affected versions include Acrobat Reader 22.001.20169 and earlier, ...