CVE-2023-26408

CVE-2023-26408 affects Adobe Acrobat Reader versions 23.001.20093 and earlier, and 20.005.30441 and earlier, with an Improper Access Control that can lead to arbitrary code execution in the context of the current user. Exploitation requires user interaction: the victim must open a malicious file....

CVE-2024-30303

CVE-2024-30303 affects Adobe Acrobat Reader DC: versions 20.005.30539, 23.008.20470 and earlier are vulnerable to a Use-After-Free in AcroForm, enabling arbitrary code execution in the current user’s context. Exploitation requires user interaction (opening a malicious file). Adobe’s APSB24-07 sec...

CVE-2024-30312

Adobe Acrobat Reader, affected in 20.005.30574, 24.002.20736 and earlier, contains an out-of-bounds read that can disclose memory and may bypass ASLR. Exploitation requires user interaction (victim opens a malicious file). Remediation per referenced advisories: update to fixed builds (e.g., Acrob...

CVE-2009-3954

CVE-2009-3954 refers to a DLL-loading vulnerability in the 3D implementation of Adobe Reader/Acrobat. Affected products span Adobe Reader/Acrobat 9.x prior to 9.3 and 8.x prior to 8.2 on Windows and macOS. The root cause is a DLL-loading issue in the 3D component that could allow arbitrary code e...

CVE-2010-2168

CVE-2010-2168 affects Adobe Reader/Acrobat 9.x prior to 9.3.3 and 8.x prior to 8.2.3 on Windows and macOS. The vulnerability arises when parsing a PDF containing crafted Flash content, specifically involving the newfunction (0x44) operator, leading to an invalid pointer and memory corruption that...

CVE-2013-0605

CVE-2013-0605 affects Adobe Reader and Acrobat: Adobe Reader/Acrobat 9.x up to 9.5.2, 10.x up to 10.1.4, and 11.x up to 11.0.0 are vulnerable. The issue allows arbitrary code execution or memory corruption via unspecified vectors. Root cause is not detailed in the provided text beyond memory corr...

CVE-2015-4435

Technical details about CVE-2015-4435 are not publicly available in the provided connected documents. The Initial Description mentions affected products and a JavaScript API bypass but does not provide concrete exploit specifics, root cause, versions, or mitigations in the supplied sources.

CVE-2016-0938

The CVE-2016-0938 entry concerns the Acrobat/Reader AcroForm plugin affecting Adobe Reader and Acrobat before 11.0.14, Acrobat and Acrobat Reader DC Classic before 15.006.30119, and Acrobat/Reader DC Continuous before 15.010.20056 on Windows and OS X. The vulnerability allows attackers to execute...

CVE-2016-4202

Technical details for CVE-2016-4202 are not publicly available in the provided documents. Monitor for updates; no specifics on affected products, root cause, impact, or fixes are given.

CVE-2016-4203

Technical details for CVE-2016-4203 are not publicly available in the provided documents; no affected products, vulnerable components, versions, or fixes are specified here. Monitor for updates.

CVE-2017-11234

Technical details about CVE-2017-11234 are not provided in the supplied documents; no affected product/version/root-cause/impact are specified here. Monitor for updates.

CVE-2017-11269

CVE-2017-11269 affects multiple Adobe Acrobat products (Reader/DC/Classic/Pro) across Windows, Mac, and mobile tracks. The vulnerability is a memory corruption flaw in the image conversion engine when handling Enhanced Metafile Format (EMF) image stream data, enabling arbitrary code execution on ...

CVE-2017-2940

CVE-2017-2940 affects Adobe Acrobat Reader versions prior to 11.0.19, 15.006.30244 and earlier, and 15.020.20042 and earlier. The issue is a memory corruption vulnerability when processing JPEG 2000 files in the rendering pipeline, which could lead to arbitrary code execution on successful exploi...

CVE-2017-2949

Adobe Acrobat/Reader (Windows and macOS) prior to listed patched builds is affected by CVE-2017-2949, a heap overflow in the XSLT engine that could enable arbitrary code execution. Nessus data for APSB17-01 corroborates multiple XSLT/XFA-related issues and memory-corruption variants. Affected ver...

CVE-2017-3012

CVE-2017-3012 is part of Adobe Acrobat/Reader vulnerabilities disclosed under APSB17-11 and related entries. The Initial Description specifies an insecure library loading issue (DLL hijacking) in the OCR plugin affecting Acrobat Reader versions 11.x, 15.x sequences (older builds such as 11.0.19 a...

CVE-2022-35669

Adobe Acrobat Reader DC/Continuious (Windows/macOS) is affected by CVE-2022-35669: an out-of-bounds read in font parsing leading to potential information disclosure and memory bypasses such as ASLR. Affected versions include 22.001.20142 and earlier, 20.005.30334 and earlier. Exploitation require...

CVE-2024-41830

CVE-2024-41830 affects Acrobat Reader: versions 20.005.30636, 24.002.20965, 24.002.20964, 24.001.30123 and earlier are exposed to a Use-After-Free vulnerability that could allow arbitrary code execution in the current user’s context. Exploitation requires user interaction, specifically the victim...

CVE-2024-45107

Summary of CVE-2024-45107 (Adobe Acrobat Reader): Affects Acrobat Reader DC/Windows/macOS versions including 20.005.30636, 24.002.20964/20991, 24.001.30123, and related builds. Root cause is a Use-After-Free in a Doc Object handling flow that can lead to disclosure of memory and potentially bypas...

CVE-2014-0524

CVE-2014-0524 affects Adobe Reader and Acrobat 10.x (before 10.1.10) and 11.x (before 11.0.07) on Windows and macOS . The root cause is incorrect memory buffer allocation while parsing a corrupted PDF file , leading to arbitrary code execution or memory corruption (DoS) . Patches are available; u...

CVE-2015-3073

Technical details about CVE-2015-3073 are not provided in the connected EUVD entries. Please monitor ENISA EUVD records for updates; no specifics on affected products, vectors, or fixes are given.

CVE-2015-5089

Technical details for CVE-2015-5089 are not publicly available in the provided connected documents; monitor for updates.

CVE-2015-5583

This CVE (CVE-2015-5583) affects Adobe Reader and Acrobat when running on Windows or OS X, with vulnerable versions including Adobe Reader/Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat/Reader DC Classic before 2015.006.30094, and Acrobat/Reader DC Continuous before 2015.009.20069. ...

CVE-2016-4196

Technical details for CVE-2016-4196 are not publicly available in the provided documents; EUVD entries mention malware in sbrugna but do not specify affected products, root cause, impact, or remediation. Monitor for updates.

CVE-2017-11219

Adobe Acrobat Reader 2017.x and earlier (versions listed in CVE-2017-11219 entry: 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier) contains an exploitable use-after-free in the XFA rendering engine. Successful exploitation could lead to ...

CVE-2017-11243

Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier contains a memory corruption vulnerability in the XSLT engine. Successful exploitation could lead to arbitrary code execution. This CVE (CVE-2017-11243) affects multipl...

CVE-2017-11249

CVE-2017-11249 affects Adobe Acrobat Reader up to 2017.009.20058 and earlier (also listed older branches) where the image conversion engine can memory-corrupt while parsing an invalid EMF record. Successful exploitation could result in arbitrary code execution. The description specifies affected ...

CVE-2017-11262

Technical details for CVE-2017-11262 are not provided in the supplied documents. Monitor for updates.

CVE-2017-3019

CVE-2017-3019 affects Adobe Acrobat Reader up to versions 11.0.19, 15.006.30280, and 15.023.20070, where the PRC (Product Representation Compact) format parser contains a memory corruption flaw. Successful exploitation could lead to arbitrary code execution on a vulnerable host. The provided docu...

CVE-2021-44739

CVE-2021-44739 affects Acrobat Reader DC ActiveX Control, with NTLMv2 credential leakage via an Information Disclosure vulnerability in 21.007.20099 and earlier (also affects 20.004.30017 and 17.011.30204). Exploitation requires user interaction (open a malicious Office file or visit a crafted pa...

CVE-2009-3955

CVE-2009-3955 affects Adobe Reader and Acrobat 9.x prior to 9.3 and 8.x prior to 8.2 on Windows and macOS. The vulnerability is in the Jp2c/JPXDecode stream handling (JPC_MS_RGN marker) where an integer sign extension bypasses a sanity check, causing memory corruption that could allow remote code...

CVE-2011-2431

CVE-2011-2431 affects Adobe Reader/Acrobat: Adobe Reader and Acrobat 8.x before 8.3.1, 9.x before 9.4.6, and 10.x before 10.1.1 are vulnerable to arbitrary code execution via unspecified vectors (security bypass vulnerability). Connected advisories/documentation confirm that patches exist (e.g., ...

CVE-2016-4191

Technical details about CVE-2016-4191 are not publicly available in the provided connected documents. Monitor for updates; no specifics on affected products, root cause, or remediation are available in the supplied sources.

CVE-2017-11217

CVE-2017-11217 affects Adobe Acrobat Reader and related products (Acrobat Reader DC/Classic/Continuous). The issue is a memory corruption vulnerability in the image conversion engine when processing EMF data that encodes Unicode text strings, which could lead to arbitrary code execution on succes...

CVE-2017-11254

Adobe Acrobat Reader/Acrobat (versions listed in CVE-2017-11254: 2017.009.20058 and earlier; 2017.008.30051 and earlier; 2015.006.30306 and earlier; and 11.0.20 and earlier) contains a use-after-free vulnerability in the JavaScript engine. The issue is exploitable and could lead to arbitrary code...

CVE-2017-11261

Technical details for CVE-2017-11261 are not publicly available in the provided documents. Monitor for updates from Adobe advisories and CVE databases.

CVE-2017-16362

Technical details about CVE-2017-16362 are not provided in the supplied documents. Public information appears limited to vulnerability description and CVSS metrics; monitor for updates from official advisories for affected products, impact, and fixes.

CVE-2017-3024

CVE-2017-3024 affects Adobe Acrobat Reader (versions 11.0.19 and earlier; 15.006.30280 and earlier; 15.023.20070 and earlier) with a memory corruption vulnerability when manipulating PDF annotations. Successful exploitation could lead to arbitrary code execution. Root cause: memory corruption dur...

CVE-2021-21059

CVE-2021-21059 affects Adobe Acrobat Reader DC , specifically versions 2020.013.20074 and earlier, 2020.001.30018 and earlier, and 2017.011.30188 and earlier. The underlying issue is a memory corruption vulnerability triggered while parsing a specially crafted PDF file. An unauthenticated attacke...

CVE-2022-35672

The CVE-2022-35672 entry describes an out-of-bounds read in Adobe Acrobat Reader when parsing a crafted file, potentially enabling code execution in the user’s context. Affected products/versions include Acrobat Reader 22.001.20085 and earlier, 20.005.30314 and earlier, and 17.012.30205 and earli...

CVE-2023-22240

Adobe Acrobat Reader DC/Continuous versi ons 22.003.20282 (and earlier), 22.003.20281 (and earlier), and 20.005.30418 (and earlier) are affected by an out-of-bounds write vulnerability that can result in arbitrary code execution in the context of the current user. Exploitation requires user inter...

CVE-2023-26425

Technical details for CVE-2023-26425 are not publicly available in the provided documents. The connected sources reference the vulnerability broadly but do not specify affected product versions, root cause, impact, or remediation. Monitor for updates.

CVE-2023-38244

CVE-2023-38244 affects Adobe Acrobat Reader versions 23.003.20244 (and earlier) and 20.005.30467 (and earlier). The issue is an out-of-bounds read that could disclose memory and bypass mitigations such as ASLR. Exploitation requires user interaction (the victim must open a malicious file). The CV...

CVE-2024-30302

Adobe Acrobat Reader DC/Classic Continuous versions affected by CVE-2024-30302 contain a Use-After-Free vulnerability that could disclose memory and bypass ASLR. Exploitation requires user interaction (victim opens a malicious file); impact notes indicate memory disclosure with high confidentiali...

CVE-2010-3622

CVE-2010-3622 affects Adobe Reader/Acrobat on Windows and macOS (AcroRead/Acrobat 9.x before 9.4 and 8.x before 8.2.5). The vulnerability is exploitable via specially crafted PDFs that trigger memory corruption, allowing arbitrary code execution or a denial of service. Connected sources confirm t...

CVE-2010-4091

CVE-2010-4091 affects Adobe Reader/Acrobat 8.x (before 8.2.6), 9.x (before 9.4.1), and 10.x (before 10.0.1) on Windows and macOS. It enables remote code execution or a denial-of-service via a crafted PDF that triggers memory corruption in the printSeps function. The vulnerability is addressed in ...

CVE-2016-0931

CVE-2016-0931 affects Adobe Reader and Acrobat on Windows and macOS. Vulnerable products include: Acrobat/Reader 11.x prior to 11.0.14; Acrobat and Acrobat Reader DC Classic prior to 15.006.30119; Acrobat and Acrobat Reader DC Continuous prior to 15.010.20056. The flaw is triggered via a crafted ...

CVE-2016-1050

Technical details for CVE-2016-1050 are not provided in the supplied connected documents. Monitor for updates.

CVE-2016-1069

Technical details for CVE-2016-1069 are not publicly available in the provided documents. Monitor for updates from vendors and security advisories.

CVE-2016-4198

Technical details for CVE-2016-4198 are not publicly provided in the supplied documents. Monitor for updates from official advisories; no product, impact, or remediation specifics are stated here.

CVE-2017-11210

Adobe Acrobat/Reader 2017-family products are affected by CVE-2017-11210, a memory corruption vulnerability in the font parsing when a font is embedded in an XPS file. Successful exploitation could lead to arbitrary code execution. Affected versions include Acrobat Reader 2017.009.20058 and earli...