CVE-2017-11214

Adobe Acrobat Reader vulnerable due to a memory corruption flaw in the image conversion engine when processing EMF data related to rendering a path. Affected products/versions include Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 an...

CVE-2017-2946

CVE-2017-2946 refers to an exploitable heap overflow in Adobe Acrobat Reader when parsing the segment for storing non-graphic information. Affected products include Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, and 11.0.18 and earlier. The surviving connected documen...

CVE-2021-40731

CVE-2021-40731 affects Adobe Acrobat Reader DC; an out-of-bounds write occurs when parsing a crafted JPEG2000 file, potentially allowing arbitrary code execution in the context of the current user. Exploitation requires user interaction (victim must open a malicious file). Affected versions inclu...

CVE-2021-44706

CVE-2021-44706 is a use‑after‑free vulnerability in Adobe Acrobat Reader DC affecting the processing of Format event actions, leading to arbitrary code execution in the context of the current user. Affected products/versions include Acrobat Reader DC 21.007.20099 and earlier, 20.004.30017 and ear...

CVE-2021-44707

The CVE-2021-44707 entry affects Adobe Acrobat Reader DC and related components. Affected versions include Acrobat Reader DC 21.007.20099 and earlier, 20.004.30017 and earlier, and 17.011.30204 and earlier. The vulnerability is an out-of-bounds write in OTF font parsing that could allow arbitrary...

CVE-2022-34220

CVE-2022-34220 affects Adobe Acrobat Reader DC/Continuous components and is a Use-After-Free vulnerability that could lead to arbitrary code execution in the current user context. According to the CVE entry, affected versions include Acrobat Reader: 22.001.20142 and earlier, 20.005.30334 and earl...

CVE-2024-30304

Adobe Acrobat Reader DC/Continuous versions 20.005.30539, 23.008.20470 and earlier are affected by a Use-After-Free vulnerability that could allow arbitrary code execution in the context of the current user. Exploitation requires user interaction (victim must open a malicious file). CVSSv3.1 base...

CVE-2014-0565

Technical details for CVE-2014-0565 are not publicly provided in the connected documents. Monitor for updates.

CVE-2017-11221

CVE-2017-11221 affects Adobe Acrobat/Reader family (including DC/Continuous and Classic tracks). The vulnerability is a type confusion in the annotation functionality that could lead to arbitrary code execution on affected builds. The related OpenVAS entries reference APSB17-24 security updates f...

CVE-2017-11244

Technical details about CVE-2017-11244 are not publicly provided in the supplied documents. No affected product/version specifics or root cause are present here. Monitor for updates from official advisories and vulnerability feeds.

CVE-2020-24426

CVE-2020-24426 affects Adobe Acrobat/Reader: out-of-bounds read in Acrobat/Reader components leading to information disclosure; exploitation requires user interaction (victim opens a malicious file) and could bypass ASLR. Affected products include Acrobat Reader DC versions 2020.012.20048 and ear...

CVE-2021-28545

CVE-2021-28545 affects Adobe Acrobat Reader DC (versions up to 2020.013.20074, 2020.001.30018, 2017.011.30188 and earlier) where missing support for an integrity check lets an unauthenticated attacker manipulate data in a certified PDF without invalidating the signature; exploitation requires use...

CVE-2022-27798

CVE-2022-27798 is a Adobe Acrobat/Reader DC out-of-bounds write vulnerability that leads to arbitrary code execution in the context of the current user. The issue affects multiple versions of Acrobat Reader DC and Acrobat/Reader across Windows/macOS platforms, with exploitation requiring user int...

CVE-2022-44516

CVE-2022-44516 is an out-of-bounds read in Acrobat Reader DC when parsing a crafted file, potentially bypassing ASLR. Affected: Acrobat Reader DC 22.001.20085 and earlier; 20.005.3031x and earlier; 17.012.30205 and earlier. Exploitation requires user interaction (the victim must open a malicious ...

CVE-2024-34101

CVE-2024-34101 affects Adobe Acrobat Reader (versions 20.005.30574, 24.002.20736 and earlier). The issue is an out-of-bounds read that could disclose sensitive memory and potentially bypass ASLR. Exploitation requires user interaction: a victim must open a malicious file. Connected advisories con...

CVE-2010-2204

Technical details about CVE-2010-2204 are not publicly provided in the supplied documents. The references reference Adobe Reader/Acrobat vulnerabilities, but no concrete root cause, affected versions, exploit status, or patch specifics are present here. Monitor for updates.

CVE-2011-2096

CVE-2011-2096 is a heap-based buffer overflow affecting Adobe Reader and Acrobat up to versions 8.x before 8.3, 9.x before 9.4.5, and 10.x before 10.1 on Windows and macOS. The vulnerability allows arbitrary code execution via unspecified vectors. Public advisories (e.g., APSB11-16; RHSA-2011:143...

CVE-2011-2436

CVE-2011-2436 is a heap-based buffer overflow in Adobe Reader/Acrobat’s image-parsing library. Affected: Acrobat/Reader 8.x before 8.3.1, 9.x before 9.4.6, 10.x before 10.1.1. Fixes are referenced in openSUSE/SUSE advisories showing acroread updated to 9.4.6 (and SUSE/NASL entries) and Gentoo GLS...

CVE-2014-0567

CVE-2014-0567 is a heap-based buffer overflow in Adobe Reader and Acrobat 10.x before 10.1.12 and 11.x before 11.0.09 on Windows and macOS. The vulnerability allows attackers to execute arbitrary code via unspecified vectors when processing a PDF containing malicious JavaScript or other content, ...

CVE-2015-5085

CVE-2015-5085 affects Adobe Reader and Acrobat on Windows/macOS: Adobe Reader/Acrobat 10.x before 10.1.15 and 11.x before 11.0.12, Acrobat DC Classic before 2015.006.30060, and Acrobat Reader DC Continuous before 2015.008.20082. The vulnerability bypasses JavaScript API execution restrictions via...

CVE-2017-11212

CVE-2017-11212 affects Adobe Acrobat Reader (various branches: 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier). The vulnerability is a memory corruption in the image conversion engine when processing Enhanced Metafile Format (EMF) data ...

CVE-2017-11228

Technical details about CVE-2017-11228 (affected software, root cause, impact, or fixes) are not publicly provided in the supplied documents. Monitor for updates and new disclosures.

CVE-2017-11246

Technical details for CVE-2017-11246 are not provided in the supplied documents; no product/version/root-cause/exploit details are available here. Monitor for updates.

CVE-2017-16361

Technical details for CVE-2017-16361 are not publicly provided in the supplied documents. Monitor for updates; only the vulnerability class (XFDF handling bypass) is mentioned in the Initial Description, with no concrete product/version/root-cause details in the Connected documents.

CVE-2017-16417

CVE-2017-16417 affects Adobe Acrobat/Reader (multiple tracked versions: 2017.012.20098 and earlier; 2017.011.30066 and earlier; 2015.006.30355 and earlier; 11.0.22 and earlier). The issue stems from a computation reading data past the end of a target buffer in the font parsing module, caused by a...

CVE-2021-21046

CVE-2021-21046 affects Adobe Acrobat Reader DC (versions listed as affected) with a memory corruption vulnerability that could allow an unauthenticated attacker to cause an application denial-of-service. Exploitation requires a user to open a specially crafted file. The connected documents confir...

CVE-2021-21086

CVE-2021-21086 affects Adobe Acrobat Reader DC and related versions (e.g., 2020.013.20074 and earlier; 2020.001.30018 and earlier; 2017.011.30188 and earlier) with an Out-of-bounds Write vulnerability in the CoolType library. The issue allows arbitrary code execution in the context of the current...

CVE-2021-28632

CVE-2021-28632 affects Adobe Acrobat Reader DC (and related Acrobat products) and is a Use-After-Free vulnerability in AcroForm fields. The issue can allow arbitrary code execution in the context of the current user, with exploitation requiring user interaction (victim must open a malicious file)...

CVE-2021-40729

CVE-2021-40729 refers to an out-of-bounds read in Adobe Acrobat Reader DC (versions 21.007.20095 and earlier; 21.007.20096 and earlier; 20.004.30015 and earlier; 17.011.30202 and earlier). The vulnerability could disclose sensitive memory and potentially bypass ASLR. Exploitation requires user in...

CVE-2021-44710

CVE-2021-44710 affects Adobe Acrobat Reader DC and related components. A use-after-free in the processing of Format event actions could lead to arbitrary code execution in the context of the current user. A successful exploit requires the user to open a malicious file, with an attacker-hostile fi...

CVE-2022-35667

CVE-2022-35667 affects Adobe Acrobat Reader/DC components: an out-of-bounds write vulnerability could allow arbitrary code execution in the context of the current user. Exploitation requires user interaction (victim opens a malicious file). Affected versions include Acrobat Reader 22.001.20169 (a...

CVE-2023-29320

CVE-2023-29320 affects Adobe Acrobat Reader, including versions 23.003.20244 and earlier and 20.005.30467 and earlier. The root cause is a Violation of Secure Design Principles that bypasses the API blacklist, enabling arbitrary code execution in the current user context after a user opens a mali...

CVE-2008-4814

Adobe Reader/Acrobat is affected by CVE-2008-4814, a vulnerability in a JavaScript method that could allow remote code execution. The issue affects Adobe Reader/Acrobat 8.1.2 and earlier, and versions before 7.1.1, due to an input validation issue. Public advisories describe potential remote code...

CVE-2011-2442

Adobe Reader/Acrobat is affected by CVE-2011-2442: a logic error vulnerability in versions 8.x prior to 8.3.1, 9.x prior to 9.4.6, and 10.x prior to 10.1.1 that could lead to arbitrary code execution. Connected advisories patch OpenBSD/OpenSUSE/Red Hat and related distributions (e.g., RHSA-2011:1...

CVE-2017-11227

Technical details about CVE-2017-11227 are not publicly available in the provided documents. Monitor for updates from official advisories; no specifics on affected products, root cause, or fixes are provided here.

CVE-2017-11256

CVE-2017-11256 affects Adobe Acrobat Reader and related Acrobat products (XFA layout engine) with a use-after-free vulnerability in content generation. Successful exploitation could lead to arbitrary code execution. The provided documents do not include patch details or affected version ranges be...

CVE-2017-16363

CVE-2017-16363 affects Adobe Acrobat and Reader (various tracks/versions listed in the description). It involves a buffer over-read in the module that handles character codes for certain textual representations, causing pointer arithmetic to read outside the buffer and potentially reveal sensitiv...

CVE-2017-16368

Technical details for CVE-2017-16368 are not publicly available in the provided documents. Monitor for updates from Adobe and advisories; no specific affected products, versions, vectors, or fixes are described here.

CVE-2021-21033

Adobe Acrobat Reader DC is affected by CVE-2021-21033 (Use After Free) in 2020.013.20074 and earlier, 2020.001.30018 and earlier, and 2017.011.30188 and earlier. An unauthenticated attacker could achieve arbitrary code execution in the user’s context, requiring the victim to open a malicious file...

CVE-2021-28631

CVE-2021-28631 affects Adobe Acrobat Reader DC and related products (Reader DC, Classic, Continuous) with a Use-After-Free in AcroForm Field that could allow arbitrary code execution in the context of the current user. The issue is exploitable via a user‑provided malicious file and requires user ...

CVE-2021-39855

CVE-2021-39855 affects Adobe Acrobat Reader DC ActiveX Control: vulnerable versions include 2021.005.20060 and earlier, 2020.004.30006 and earlier, and 2017.011.30199 and earlier. The issue is an information-disclosure vulnerability that could allow an unauthenticated attacker to obtain NTLMv2 cr...

CVE-2022-34223

CVE-2022-34223 affects Adobe Acrobat Reader DC/Acrobat/Reader prior to specific patched builds (versions listed in the CVE entry and Nessus APSB22-32 coverage). The issue is described as a Use-After-Free vulnerability that could allow remote code execution in the context of the current user, requ...

CVE-2022-34238

Technical details about CVE-2022-34238 are not publicly available in the provided connected documents. Monitor for updates from vendors and security advisories.

CVE-2007-0045

CVE-2007-0045 describes a set of cross-site scripting (XSS) vulnerabilities in the Adobe Acrobat Reader Plugin used with browsers on Windows, allowing remote injection of arbitrary JavaScript via a .pdf URL containing a javascript:, res:, or related AJAX parameters (FDF/XML/XFDF) or an anchor nam...

CVE-2010-2890

Technical details for CVE-2010-2890 (affected products, root cause, impact, fixes) are not publicly provided in the supplied documents. Monitor for updates from vendors and security bulletins.

CVE-2011-2107

Adobe Flash Player vulnerability CVE-2011-2107 is an XSS issue described as affecting Flash Player before 10.3.181.22 on Windows/macOS/Linux/Solaris and before 10.3.185.22 on Android, allowing remote scripting via unspecified vectors. Connected sources confirm this CVE is tied to Flash Player and...

CVE-2016-4202

Technical details for CVE-2016-4202 are not publicly available in the provided documents. Monitor for updates; no specifics on affected products, root cause, impact, or fixes are given.

CVE-2016-4203

Technical details for CVE-2016-4203 are not publicly available in the provided documents; no affected products, vulnerable components, versions, or fixes are specified here. Monitor for updates.

CVE-2017-11209

CVE-2017-11209 affects Adobe Acrobat Reader (Windows/macOS) versions including 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier. The issue is a memory corruption vulnerability that occurs when reading a JPEG embedded in an XML Paper Speci...

CVE-2017-11233

CVE-2017-11233 affects several Adobe Acrobat Reader versions (including 2017.009.20058, 2017.008.30051, 2015.006.30306, and 11.0.20 and earlier). The issue is a memory corruption vulnerability in the image conversion engine when processing EMF data related to block transfer of pixels. According t...