CVE-2022-34227

Adobe Acrobat Reader DC/Acrobat Reader versions 22.001.20142 (and earlier), 20.005.30334 (and earlier) and 17.012.30229 (and earlier) are affected by CVE-2022-34227, a Use-After-Free vulnerability that could allow arbitrary code execution in the context of the current user. Exploitation requires ...

CVE-2022-35678

CVE-2022-35678 affects Adobe Acrobat Reader DC/Classic products with an out-of-bounds read flaw that can disclose memory contents. The issue, triggered by opening a malicious file, could bypass ASLR and requires user interaction. Affected versions include Acrobat Reader 22.001.20169 and earlier, ...

CVE-2023-21614

CVE-2023-21614 affects Adobe Acrobat Reader DC/Adobe Acrobat where fonts parsing causes an out-of-bounds read, exposing sensitive memory. Affected versions include 22.003.20282 and earlier, 22.003.20281 and earlier, and 20.005.30418 and earlier. Root cause: out-of-bounds read leading to informati...

CVE-2015-5085

CVE-2015-5085 affects Adobe Reader and Acrobat on Windows/macOS: Adobe Reader/Acrobat 10.x before 10.1.15 and 11.x before 11.0.12, Acrobat DC Classic before 2015.006.30060, and Acrobat Reader DC Continuous before 2015.008.20082. The vulnerability bypasses JavaScript API execution restrictions via...

CVE-2017-3113

CVE-2017-3113 is an exploitable use-after-free in the JavaScript engine of Adobe Acrobat/Reader (and related Acrobat products) affecting 2017-era builds and earlier. The initial description specifies arbitrary code execution if successfully exploited by creating large strings. Connected OpenVAS e...

CVE-2021-39836

CVE-2021-39836 affects Adobe Acrobat-related products: Acrobat Reader DC versions 2021.005.20060 and earlier, 2020.004.30006 and earlier, and 2017.011.30199 and earlier, with a use-after-free in the AcroForm buttonGetIcon handling that could lead to arbitrary code execution in the context of the ...

CVE-2022-27790

CVE-2022-27790 affects Adobe Acrobat Reader DC and related Acrobat/Reader builds. A use-after-free in font processing could allow arbitrary code execution in the context of the current user, requiring user interaction (victim opens a malicious file). Affected versions include Acrobat Reader DC 22...

CVE-2022-28235

CVE-2022-28235 affects Adobe Acrobat Reader DC and related Acrobat/Reader variants. It is a use-after-free vulnerability in the processing of the acroform event that could allow arbitrary code execution in the current user context. Exploitation requires user interaction (opening a malicious file)...

CVE-2022-28248

CVE-2022-28248 affects Adobe Acrobat Reader DC and related Acrobat/Reader versions (22.001.2011x and earlier; 20.005.3033x and earlier; 17.012.3022x and earlier) via an out-of-bounds read when parsing crafted files. The root cause is a boundary/ memory structure handling flaw that could allow rea...

CVE-2022-34225

CVE-2022-34225 affects Adobe Acrobat Reader DC/Continuous and Acrobat Reader variants; it is a Use-After-Free in AcroForm exportValues leading to arbitrary code execution under the current user, with exploitation requiring the user to open a malicious file. Vendor advisories indicate updates (APS...

CVE-2022-34226

CVE-2022-34226 affects Adobe Acrobat Reader DC/Acrobat Reader with versions listed as affected (22.001.20142 and earlier for Reader, plus 20.005.30334 and 17.012.30229 and earlier). The issue is an out-of-bounds read when parsing a crafted file, which can allow code execution in the context of th...

CVE-2022-38450

CVE-2022-38450 affects Adobe Acrobat Reader DC and Acrobat Reader DC Continuous (Windows/Mac), involving a stack-based buffer overflow in XFA parsing that can lead to arbitrary code execution in the context of the current user. Exploitation requires the user to open a malicious file, with the iss...

CVE-2021-44708

The CVE-2021-44708 entry describes a heap-overflow vulnerability in Adobe Acrobat/Reader DC caused by insecure handling of a crafted file. Affected versions include Acrobat Reader DC 21.007.20099 and earlier, 20.004.30017 and earlier, and 17.011.30204 and earlier. Exploitation can lead to arbitra...

CVE-2022-28245

CVE-2022-28245 is an out-of-bounds read in Adobe Acrobat/Reader DC when parsing a crafted file, potentially bypassing ASLR. Affected: Acrobat Reader DC 22.001.2011x and earlier; Reader DC 20.005.3033x and earlier; Acrobat 17.012.3022x and earlier. Exploitation requires user interaction (victim op...

CVE-2022-28247

CVE-2022-28247 affects Adobe Acrobat/Reader components: Acrobat Reader DC versions 22.001.2011x and earlier, 20.005.3033x and earlier, and 17.012.3022x and earlier, with an uncontrolled search path vulnerability that could cause local privilege escalation. Exploitation requires user interaction: ...

CVE-2022-34232

Summary of CVE-2022-34232 (Adobe Acrobat/Reader Use-After-Free): Affects Adobe Acrobat Reader versions 22.001.20142 and earlier, 20.005.30334 and earlier, and 17.012.30229 and earlier. Root cause is a Use-After-Free condition in the PDF processing path that can lead to disclosure of sensitive mem...

CVE-2022-34239

CVE-2022-34239 affects Adobe Acrobat Reader and related products; the issue is an out-of-bounds read in font parsing that could disclose memory. Versions affected include Acrobat Reader DC/Classic lines (e.g., 22.001.20142 and earlier; 20.005.30334 and earlier; 17.012.30229 and earlier), with exp...

CVE-2024-30284

CVE-2024-30284 affects Adobe Acrobat Reader DC/Classic: Use-After-Free in a component leads to arbitrary code execution under the user’s context. Impact is high (C:H/I:H/A:H) with CVSS 3.1 7.8. Exploitation requires user interaction (victim opens a malicious file). Affected versions include Acrob...

CVE-2014-0568

CVE-2014-0568 impacts Adobe Reader and Acrobat 10.x before 10.1.12 and 11.x before 11.0.09 on Windows. The root cause is a NtSetInformationFile hook that enables an NTFS junction attack to bypass sandboxing and execute native code with elevated privileges. Mitigation/patch: upgrade to affected pr...

CVE-2016-0946

Technical details for CVE-2016-0946 are not publicly available in the provided documents. No concrete information on affected products, vectors, or fixes is present; monitor for updates.

CVE-2016-1093

CVE-2016-1093 affects Adobe Reader and Acrobat before 11.0.16, Acrobat and Acrobat Reader DC Classic before 15.006.30172, and Acrobat and Acrobat Reader DC Continuous before 15.016.20039 on Windows and macOS. The vulnerability allows attackers to execute arbitrary code or cause a denial of servic...

CVE-2017-11270

Technical details for CVE-2017-11270 are not publicly available in the provided connected documents. Monitor for updates and vendor advisories for affected Adobe Acrobat products.

CVE-2021-40731

CVE-2021-40731 affects Adobe Acrobat Reader DC; an out-of-bounds write occurs when parsing a crafted JPEG2000 file, potentially allowing arbitrary code execution in the context of the current user. Exploitation requires user interaction (victim must open a malicious file). Affected versions inclu...

CVE-2022-27789

Adobe Acrobat Reader DC is affected by CVE-2022-27789: a use-after-free in AcroForm processing could allow arbitrary code execution in the context of the current user. Exploitation requires user interaction (victim opens a malicious file). References indicate an Adobe APSB22-16 update addressing ...

CVE-2010-0186

CVE-2010-0186 is a cross-domain sandbox bypass vulnerability affecting Adobe Flash Player (before 10.0.45.2), Adobe AIR (before 1.5.3.9130), and Adobe Reader/Acrobat (8.x before 8.2.1 and 9.x before 9.3.1). The issue allows remote attackers to make cross-domain requests via unspecified vectors, w...

CVE-2017-11211

CVE-2017-11211 details are not publicly provided in the connected documents. Monitor Adobe advisories and vendor bulletins for updates, fixes, affected versions, and remediation guidance.

CVE-2021-28554

CVE-2021-28554 affects Adobe Acrobat/Reader DC family. Adobe notes Out-of-bounds Read allowing arbitrary code execution in the context of the current user, requiring the victim to open a malicious file (user interaction). Affected are Acrobat Reader DC versions 2021.001.20155 and earlier, 2020.00...

CVE-2022-34219

Adobe Acrobat Reader DC/Classic versions up to 22.001.20142 (and earlier) and 17.012.30229 (and earlier) are affected by a Use-After-Free vulnerability that could execute arbitrary code. The issue requires the user to open a malicious file, and is tied to font parsing/use-after-free in the reader...

CVE-2022-35670

Adobe Acrobat Reader is affected by CVE-2022-35670 (Use After Free) which can disclose memory and bypass ASLR. Affected is multiple older releases; exploitation requires user interaction by opening a malicious file. Remediation: update to the latest Adobe Acrobat/Reader version per APSB22-39 to m...

CVE-2014-9158

CVE-2014-9158 affects Adobe Reader and Acrobat (Windows and OS X) and is a memory corruption vulnerability caused by an error while parsing a corrupted PDF file. A remote attacker may exploit this by enticing a user to open a specially crafted PDF, potentially enabling arbitrary code execution or...

CVE-2015-4435

Technical details about CVE-2015-4435 are not publicly available in the provided connected documents. The Initial Description mentions affected products and a JavaScript API bypass but does not provide concrete exploit specifics, root cause, versions, or mitigations in the supplied sources.

CVE-2017-11238

The connected material confirms CVE-2017-11238 is a Java deserialization vulnerability in Adobe ColdFusion’s Flex Integration service (DataServicesCFProxy) exposed via an RMI interface. The flaw allows arbitrary Java objects to be deserialized over the network, enabling remote code execution when...

CVE-2017-11241

Technical details for CVE-2017-11241 are not provided in the connected documents. OpenVAS entries reference broader Acrobat updates and other CVEs but do not disclose specific root cause, affected versions, or fixes. Monitor for updates.

CVE-2017-11268

Technical details about CVE-2017-11268 are not provided in the connected documents. The initial description contains vulnerability specifics, but no additional technical details are available here. Monitor for updates.

CVE-2021-44706

CVE-2021-44706 is a use‑after‑free vulnerability in Adobe Acrobat Reader DC affecting the processing of Format event actions, leading to arbitrary code execution in the context of the current user. Affected products/versions include Acrobat Reader DC 21.007.20099 and earlier, 20.004.30017 and ear...

CVE-2022-27786

CVE-2022-27786 affects Adobe Acrobat Reader DC (and related Acrobat/Reader variants) with font-processing use-after-free leading to arbitrary code execution in the current user. Affected versions include Acrobat Reader DC 22.001.20085 and earlier, 20.005.3031x and earlier, and 17.012.30205 and ea...

CVE-2022-27801

CVE-2022-27801 affects Adobe Acrobat Reader DC (and related Acrobat/Reader components) with use-after-free in annotation processing, allowing arbitrary code execution in the current user context. Affected versions include Acrobat Reader DC 22.001.20085 (and earlier), 20.005.3031x (and earlier) an...

CVE-2022-28260

CVE-2022-28260 affects Adobe Acrobat/Reader DC: out-of-bounds read when parsing a crafted file, allowing read past end of memory and potential bypass of ASLR. Affected: Acrobat Reader DC 22.001.2011x and earlier; 20.005.3033x and earlier; 17.012.3022x and earlier. Impact: user interaction require...

CVE-2022-34220

CVE-2022-34220 affects Adobe Acrobat Reader DC/Continuous components and is a Use-After-Free vulnerability that could lead to arbitrary code execution in the current user context. According to the CVE entry, affected versions include Acrobat Reader: 22.001.20142 and earlier, 20.005.30334 and earl...

CVE-2023-21610

CVE-2023-21610 affects Adobe Acrobat Reader versions 22.003.20282 and earlier, 20.005.30418 and earlier. It is a stack-based buffer overflow that could lead to arbitrary code execution in the context of the current user. Exploitation requires user interaction: the victim must open a malicious fil...

CVE-2014-0566

CVE-2014-0566 affects Adobe Reader/Acrobat on Windows and OS X, with versions 10.x before 10.1.12 and 11.x before 11.0.09 susceptible to arbitrary code execution or memory corruption via unspecified vectors (a separate issue from CVE-2014-0565). Connected sources indicate this vulnerability spans...

CVE-2017-11226

CVE-2017-11226 affects Adobe Acrobat Reader/Acrobat up to several older builds (e.g., Reader 2017.009.20058 and earlier; 2017.008.30051 and earlier; 2015.006.30306 and earlier; 11.0.20 and earlier). It is a memory corruption vulnerability in the image processing engine when handling JPEG 2000 (JP...

CVE-2017-11242

Adobe Acrobat/Acrobat Reader is affected by a memory corruption vulnerability in the image conversion EMF processing engine, potentially enabling arbitrary code execution on successful exploitation. Affected products/versions include Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and e...

CVE-2017-16363

CVE-2017-16363 affects Adobe Acrobat and Reader (various tracks/versions listed in the description). It involves a buffer over-read in the module that handles character codes for certain textual representations, causing pointer arithmetic to read outside the buffer and potentially reveal sensitiv...

CVE-2017-16367

Technical details for CVE-2017-16367 are not provided in the supplied documents. Monitor for updates.

CVE-2021-21042

CVE-2021-21042 affects Acrobat Reader DC and related versions (2020.013.20074 and earlier; 2020.001.30018 and earlier; 2017.011.30188 and earlier). It is an Out-of-bounds Read vulnerability that can lead to arbitrary disclosure of memory stack information and may bypass ASLR. Exploitation require...

CVE-2022-27798

CVE-2022-27798 is a Adobe Acrobat/Reader DC out-of-bounds write vulnerability that leads to arbitrary code execution in the context of the current user. The issue affects multiple versions of Acrobat Reader DC and Acrobat/Reader across Windows/macOS platforms, with exploitation requiring user int...

CVE-2022-34224

Adobe Acrobat Reader DC/Continuous updates are affected by CVE-2022-34224 (Use After Free in AcroForm setItems). Affected versions include 22.001.20142 and earlier, 20.005.30334 and earlier, and 17.012.30229 and earlier. The vulnerability could allow arbitrary code execution in the context of the...

CVE-2022-44516

CVE-2022-44516 is an out-of-bounds read in Acrobat Reader DC when parsing a crafted file, potentially bypassing ASLR. Affected: Acrobat Reader DC 22.001.20085 and earlier; 20.005.3031x and earlier; 17.012.30205 and earlier. Exploitation requires user interaction (the victim must open a malicious ...

CVE-2023-38247

Summary (CVE-2023-38247) Adobe Acrobat Reader DC/Classic vulnerable to an out-of-bounds read that could disclose sensitive memory and bypass ASLR. Affected: 23.003.20244 and earlier, and 20.005.30467 and earlier. Exploitation requires user interaction (opening a malicious file). Connected sources...