CVE-2022-27798

CVE-2022-27798 is a Adobe Acrobat/Reader DC out-of-bounds write vulnerability that leads to arbitrary code execution in the context of the current user. The issue affects multiple versions of Acrobat Reader DC and Acrobat/Reader across Windows/macOS platforms, with exploitation requiring user int...

CVE-2022-28247

CVE-2022-28247 affects Adobe Acrobat/Reader components: Acrobat Reader DC versions 22.001.2011x and earlier, 20.005.3033x and earlier, and 17.012.3022x and earlier, with an uncontrolled search path vulnerability that could cause local privilege escalation. Exploitation requires user interaction: ...

CVE-2023-29320

CVE-2023-29320 affects Adobe Acrobat Reader, including versions 23.003.20244 and earlier and 20.005.30467 and earlier. The root cause is a Violation of Secure Design Principles that bypasses the API blacklist, enabling arbitrary code execution in the current user context after a user opens a mali...

CVE-2024-30304

Adobe Acrobat Reader DC/Continuous versions 20.005.30539, 23.008.20470 and earlier are affected by a Use-After-Free vulnerability that could allow arbitrary code execution in the context of the current user. Exploitation requires user interaction (victim must open a malicious file). CVSSv3.1 base...

CVE-2014-0524

CVE-2014-0524 affects Adobe Reader and Acrobat 10.x (before 10.1.10) and 11.x (before 11.0.07) on Windows and macOS . The root cause is incorrect memory buffer allocation while parsing a corrupted PDF file , leading to arbitrary code execution or memory corruption (DoS) . Patches are available; u...

CVE-2014-0568

CVE-2014-0568 impacts Adobe Reader and Acrobat 10.x before 10.1.12 and 11.x before 11.0.09 on Windows. The root cause is a NtSetInformationFile hook that enables an NTFS junction attack to bypass sandboxing and execute native code with elevated privileges. Mitigation/patch: upgrade to affected pr...

CVE-2015-6723

Technical details about CVE-2015-6723 are not publicly available in the provided documents. Monitor for updates from vendor/security advisories.

CVE-2017-11224

CVE-2017-11224 affects Adobe Acrobat/Reader (various 2017/earlier builds) with the XFA layout engine. It is described as a use-after-free in XFA, with successful exploitation potentially enabling arbitrary code execution (high severity). The connected OpenVAS entries reference this CVE as part of...

CVE-2017-11226

CVE-2017-11226 affects Adobe Acrobat Reader/Acrobat up to several older builds (e.g., Reader 2017.009.20058 and earlier; 2017.008.30051 and earlier; 2015.006.30306 and earlier; 11.0.20 and earlier). It is a memory corruption vulnerability in the image processing engine when handling JPEG 2000 (JP...

CVE-2017-11240

CVE-2017-11240: An out-of-bounds read vulnerability affects Adobe Acrobat and Adobe Reader. The description specifies affected versions include Acrobat/Reader 2017.012.20098 and earlier, 2017.011.30066 and earlier, 2015.006.30355 and earlier, and 11.0.22 and earlier. Successful exploitation could...

CVE-2017-11244

Technical details about CVE-2017-11244 are not publicly provided in the supplied documents. No affected product/version specifics or root cause are present here. Monitor for updates from official advisories and vulnerability feeds.

CVE-2017-16367

Technical details for CVE-2017-16367 are not provided in the supplied documents. Monitor for updates.

CVE-2021-21058

CVE-2021-21058 affects Adobe Acrobat Reader DC (versions 2020.013.20074 and earlier; 2020.001.30018 and earlier; 2017.011.30188 and earlier). Root cause: memory corruption when parsing a specially crafted PDF, leading to arbitrary code execution in the context of the current user. Exploitation re...

CVE-2021-28545

CVE-2021-28545 affects Adobe Acrobat Reader DC (versions up to 2020.013.20074, 2020.001.30018, 2017.011.30188 and earlier) where missing support for an integrity check lets an unauthenticated attacker manipulate data in a certified PDF without invalidating the signature; exploitation requires use...

CVE-2021-28554

CVE-2021-28554 affects Adobe Acrobat/Reader DC family. Adobe notes Out-of-bounds Read allowing arbitrary code execution in the context of the current user, requiring the victim to open a malicious file (user interaction). Affected are Acrobat Reader DC versions 2021.001.20155 and earlier, 2020.00...

CVE-2022-34238

Technical details about CVE-2022-34238 are not publicly available in the provided connected documents. Monitor for updates from vendors and security advisories.

CVE-2022-35667

CVE-2022-35667 affects Adobe Acrobat Reader/DC components: an out-of-bounds write vulnerability could allow arbitrary code execution in the context of the current user. Exploitation requires user interaction (victim opens a malicious file). Affected versions include Acrobat Reader 22.001.20169 (a...

CVE-2022-35670

Adobe Acrobat Reader is affected by CVE-2022-35670 (Use After Free) which can disclose memory and bypass ASLR. Affected is multiple older releases; exploitation requires user interaction by opening a malicious file. Remediation: update to the latest Adobe Acrobat/Reader version per APSB22-39 to m...

CVE-2022-44516

CVE-2022-44516 is an out-of-bounds read in Acrobat Reader DC when parsing a crafted file, potentially bypassing ASLR. Affected: Acrobat Reader DC 22.001.20085 and earlier; 20.005.3031x and earlier; 17.012.30205 and earlier. Exploitation requires user interaction (the victim must open a malicious ...

CVE-2007-0045

CVE-2007-0045 describes a set of cross-site scripting (XSS) vulnerabilities in the Adobe Acrobat Reader Plugin used with browsers on Windows, allowing remote injection of arbitrary JavaScript via a .pdf URL containing a javascript:, res:, or related AJAX parameters (FDF/XML/XFDF) or an anchor nam...

CVE-2015-5089

Technical details for CVE-2015-5089 are not publicly available in the provided connected documents; monitor for updates.

CVE-2016-4207

Technical details for CVE-2016-4207 are not publicly available in the provided connected documents. Monitor for updates from official advisories.

CVE-2017-11212

CVE-2017-11212 affects Adobe Acrobat Reader (various branches: 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier). The vulnerability is a memory corruption in the image conversion engine when processing Enhanced Metafile Format (EMF) data ...

CVE-2017-2940

CVE-2017-2940 affects Adobe Acrobat Reader versions prior to 11.0.19, 15.006.30244 and earlier, and 15.020.20042 and earlier. The issue is a memory corruption vulnerability when processing JPEG 2000 files in the rendering pipeline, which could lead to arbitrary code execution on successful exploi...

CVE-2021-21042

CVE-2021-21042 affects Acrobat Reader DC and related versions (2020.013.20074 and earlier; 2020.001.30018 and earlier; 2017.011.30188 and earlier). It is an Out-of-bounds Read vulnerability that can lead to arbitrary disclosure of memory stack information and may bypass ASLR. Exploitation require...

CVE-2021-40730

CVE-2021-40730 affects Adobe Acrobat Reader DC. The flaw is a use-after-free in the parsing of JPEG2000 images, allowing information disclosure. A remote attacker must entice the user to visit a malicious page or open a crafted file (user interaction required). Affected versions include 21.007.20...

CVE-2021-44707

The CVE-2021-44707 entry affects Adobe Acrobat Reader DC and related components. Affected versions include Acrobat Reader DC 21.007.20099 and earlier, 20.004.30017 and earlier, and 17.011.30204 and earlier. The vulnerability is an out-of-bounds write in OTF font parsing that could allow arbitrary...

CVE-2023-29299

CVE-2023-29299 affects Adobe Acrobat Reader versions 23.003.20244 and earlier, and 20.005.30467 and earlier. The issue is an Untrusted Search Path vulnerability that could lead to an application denial-of-service. Exploitation requires the user to open a malicious file and is conditioned by the d...

CVE-2026-47914

CVE-2026-47914 affects Acrobat Reader versions 24.001.30365, 26.001.21651 and earlier. The issue is a Use After Free (CWE-416) vulnerability that could allow arbitrary code execution in the context of the current user. Exploitation requires user interaction: a victim must open a malicious file. C...

CVE-2015-3072

Technical details about CVE-2015-3072 are not publicly provided in the supplied documents. Monitor for updates from official advisories.

CVE-2017-11221

CVE-2017-11221 affects Adobe Acrobat/Reader family (including DC/Continuous and Classic tracks). The vulnerability is a type confusion in the annotation functionality that could lead to arbitrary code execution on affected builds. The related OpenVAS entries reference APSB17-24 security updates f...

CVE-2017-11227

Technical details about CVE-2017-11227 are not publicly available in the provided documents. Monitor for updates from official advisories; no specifics on affected products, root cause, or fixes are provided here.

CVE-2017-11233

CVE-2017-11233 affects several Adobe Acrobat Reader versions (including 2017.009.20058, 2017.008.30051, 2015.006.30306, and 11.0.20 and earlier). The issue is a memory corruption vulnerability in the image conversion engine when processing EMF data related to block transfer of pixels. According t...

CVE-2017-11246

Technical details for CVE-2017-11246 are not provided in the supplied documents; no product/version/root-cause/exploit details are available here. Monitor for updates.

CVE-2020-24426

CVE-2020-24426 affects Adobe Acrobat/Reader: out-of-bounds read in Acrobat/Reader components leading to information disclosure; exploitation requires user interaction (victim opens a malicious file) and could bypass ASLR. Affected products include Acrobat Reader DC versions 2020.012.20048 and ear...

CVE-2022-27801

CVE-2022-27801 affects Adobe Acrobat Reader DC (and related Acrobat/Reader components) with use-after-free in annotation processing, allowing arbitrary code execution in the current user context. Affected versions include Acrobat Reader DC 22.001.20085 (and earlier), 20.005.3031x (and earlier) an...

CVE-2023-22240

Adobe Acrobat Reader DC/Continuous versi ons 22.003.20282 (and earlier), 22.003.20281 (and earlier), and 20.005.30418 (and earlier) are affected by an out-of-bounds write vulnerability that can result in arbitrary code execution in the context of the current user. Exploitation requires user inter...

CVE-2024-30302

Adobe Acrobat Reader DC/Classic Continuous versions affected by CVE-2024-30302 contain a Use-After-Free vulnerability that could disclose memory and bypass ASLR. Exploitation requires user interaction (victim opens a malicious file); impact notes indicate memory disclosure with high confidentiali...

CVE-2010-2204

Technical details about CVE-2010-2204 are not publicly provided in the supplied documents. The references reference Adobe Reader/Acrobat vulnerabilities, but no concrete root cause, affected versions, exploit status, or patch specifics are present here. Monitor for updates.

CVE-2010-2890

Technical details for CVE-2010-2890 (affected products, root cause, impact, fixes) are not publicly provided in the supplied documents. Monitor for updates from vendors and security bulletins.

CVE-2014-0565

Technical details for CVE-2014-0565 are not publicly provided in the connected documents. Monitor for updates.

CVE-2017-11209

CVE-2017-11209 affects Adobe Acrobat Reader (Windows/macOS) versions including 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier. The issue is a memory corruption vulnerability that occurs when reading a JPEG embedded in an XML Paper Speci...

CVE-2017-11234

Technical details about CVE-2017-11234 are not provided in the supplied documents; no affected product/version/root-cause/impact are specified here. Monitor for updates.

CVE-2017-16361

Technical details for CVE-2017-16361 are not publicly provided in the supplied documents. Monitor for updates; only the vulnerability class (XFDF handling bypass) is mentioned in the Initial Description, with no concrete product/version/root-cause details in the Connected documents.

CVE-2017-2946

CVE-2017-2946 refers to an exploitable heap overflow in Adobe Acrobat Reader when parsing the segment for storing non-graphic information. Affected products include Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, and 11.0.18 and earlier. The surviving connected documen...

CVE-2021-21086

CVE-2021-21086 affects Adobe Acrobat Reader DC and related versions (e.g., 2020.013.20074 and earlier; 2020.001.30018 and earlier; 2017.011.30188 and earlier) with an Out-of-bounds Write vulnerability in the CoolType library. The issue allows arbitrary code execution in the context of the current...

CVE-2021-28632

CVE-2021-28632 affects Adobe Acrobat Reader DC (and related Acrobat products) and is a Use-After-Free vulnerability in AcroForm fields. The issue can allow arbitrary code execution in the context of the current user, with exploitation requiring user interaction (victim must open a malicious file)...

CVE-2021-39855

CVE-2021-39855 affects Adobe Acrobat Reader DC ActiveX Control: vulnerable versions include 2021.005.20060 and earlier, 2020.004.30006 and earlier, and 2017.011.30199 and earlier. The issue is an information-disclosure vulnerability that could allow an unauthenticated attacker to obtain NTLMv2 cr...

CVE-2022-35669

Adobe Acrobat Reader DC/Continuious (Windows/macOS) is affected by CVE-2022-35669: an out-of-bounds read in font parsing leading to potential information disclosure and memory bypasses such as ASLR. Affected versions include 22.001.20142 and earlier, 20.005.30334 and earlier. Exploitation require...

CVE-2024-30312

Adobe Acrobat Reader, affected in 20.005.30574, 24.002.20736 and earlier, contains an out-of-bounds read that can disclose memory and may bypass ASLR. Exploitation requires user interaction (victim opens a malicious file). Remediation per referenced advisories: update to fixed builds (e.g., Acrob...