1382 matches found
CVE-2017-16417
CVE-2017-16417 affects Adobe Acrobat/Reader (multiple tracked versions: 2017.012.20098 and earlier; 2017.011.30066 and earlier; 2015.006.30355 and earlier; 11.0.22 and earlier). The issue stems from a computation reading data past the end of a target buffer in the font parsing module, caused by a...
CVE-2021-21033
Adobe Acrobat Reader DC is affected by CVE-2021-21033 (Use After Free) in 2020.013.20074 and earlier, 2020.001.30018 and earlier, and 2017.011.30188 and earlier. An unauthenticated attacker could achieve arbitrary code execution in the user’s context, requiring the victim to open a malicious file...
CVE-2021-28631
CVE-2021-28631 affects Adobe Acrobat Reader DC and related products (Reader DC, Classic, Continuous) with a Use-After-Free in AcroForm Field that could allow arbitrary code execution in the context of the current user. The issue is exploitable via a user‑provided malicious file and requires user ...
CVE-2022-34238
Technical details about CVE-2022-34238 are not publicly available in the provided connected documents. Monitor for updates from vendors and security advisories.
CVE-2023-26408
CVE-2023-26408 affects Adobe Acrobat Reader versions 23.001.20093 and earlier, and 20.005.30441 and earlier, with an Improper Access Control that can lead to arbitrary code execution in the context of the current user. Exploitation requires user interaction: the victim must open a malicious file....
CVE-2024-30312
Adobe Acrobat Reader, affected in 20.005.30574, 24.002.20736 and earlier, contains an out-of-bounds read that can disclose memory and may bypass ASLR. Exploitation requires user interaction (victim opens a malicious file). Remediation per referenced advisories: update to fixed builds (e.g., Acrob...
CVE-2024-45107
Summary of CVE-2024-45107 (Adobe Acrobat Reader): Affects Acrobat Reader DC/Windows/macOS versions including 20.005.30636, 24.002.20964/20991, 24.001.30123, and related builds. Root cause is a Use-After-Free in a Doc Object handling flow that can lead to disclosure of memory and potentially bypas...
CVE-2009-3954
CVE-2009-3954 refers to a DLL-loading vulnerability in the 3D implementation of Adobe Reader/Acrobat. Affected products span Adobe Reader/Acrobat 9.x prior to 9.3 and 8.x prior to 8.2 on Windows and macOS. The root cause is a DLL-loading issue in the 3D component that could allow arbitrary code e...
CVE-2010-2168
CVE-2010-2168 affects Adobe Reader/Acrobat 9.x prior to 9.3.3 and 8.x prior to 8.2.3 on Windows and macOS. The vulnerability arises when parsing a PDF containing crafted Flash content, specifically involving the newfunction (0x44) operator, leading to an invalid pointer and memory corruption that...
CVE-2010-3622
CVE-2010-3622 affects Adobe Reader/Acrobat on Windows and macOS (AcroRead/Acrobat 9.x before 9.4 and 8.x before 8.2.5). The vulnerability is exploitable via specially crafted PDFs that trigger memory corruption, allowing arbitrary code execution or a denial of service. Connected sources confirm t...
CVE-2013-0605
CVE-2013-0605 affects Adobe Reader and Acrobat: Adobe Reader/Acrobat 9.x up to 9.5.2, 10.x up to 10.1.4, and 11.x up to 11.0.0 are vulnerable. The issue allows arbitrary code execution or memory corruption via unspecified vectors. Root cause is not detailed in the provided text beyond memory corr...
CVE-2016-0938
The CVE-2016-0938 entry concerns the Acrobat/Reader AcroForm plugin affecting Adobe Reader and Acrobat before 11.0.14, Acrobat and Acrobat Reader DC Classic before 15.006.30119, and Acrobat/Reader DC Continuous before 15.010.20056 on Windows and OS X. The vulnerability allows attackers to execute...
CVE-2016-4196
Technical details for CVE-2016-4196 are not publicly available in the provided documents; EUVD entries mention malware in sbrugna but do not specify affected products, root cause, impact, or remediation. Monitor for updates.
CVE-2016-4202
Technical details for CVE-2016-4202 are not publicly available in the provided documents. Monitor for updates; no specifics on affected products, root cause, impact, or fixes are given.
CVE-2016-4203
Technical details for CVE-2016-4203 are not publicly available in the provided documents; no affected products, vulnerable components, versions, or fixes are specified here. Monitor for updates.
CVE-2017-11217
CVE-2017-11217 affects Adobe Acrobat Reader and related products (Acrobat Reader DC/Classic/Continuous). The issue is a memory corruption vulnerability in the image conversion engine when processing EMF data that encodes Unicode text strings, which could lead to arbitrary code execution on succes...
CVE-2017-2940
CVE-2017-2940 affects Adobe Acrobat Reader versions prior to 11.0.19, 15.006.30244 and earlier, and 15.020.20042 and earlier. The issue is a memory corruption vulnerability when processing JPEG 2000 files in the rendering pipeline, which could lead to arbitrary code execution on successful exploi...
CVE-2022-35669
Adobe Acrobat Reader DC/Continuious (Windows/macOS) is affected by CVE-2022-35669: an out-of-bounds read in font parsing leading to potential information disclosure and memory bypasses such as ASLR. Affected versions include 22.001.20142 and earlier, 20.005.30334 and earlier. Exploitation require...
CVE-2023-22240
Adobe Acrobat Reader DC/Continuous versi ons 22.003.20282 (and earlier), 22.003.20281 (and earlier), and 20.005.30418 (and earlier) are affected by an out-of-bounds write vulnerability that can result in arbitrary code execution in the context of the current user. Exploitation requires user inter...
CVE-2024-41830
CVE-2024-41830 affects Acrobat Reader: versions 20.005.30636, 24.002.20965, 24.002.20964, 24.001.30123 and earlier are exposed to a Use-After-Free vulnerability that could allow arbitrary code execution in the current user’s context. Exploitation requires user interaction, specifically the victim...
CVE-2007-0044
CVE-2007-0044 affects Adobe Acrobat Reader Plugin for Firefox/IE/Opera, with the vulnerability allowing remote attackers to induce the browser to make unauthorized requests to other sites via AJAX requests (parameters in FDF/xml/xfdf) after the hash, i.e., a cross-site request forgery (CSRF) in t...
CVE-2010-2209
Technical details for CVE-2010-2209 are not publicly provided in the supplied connected documents. They reference Acrobat/Reader and related CVEs but do not specify affected versions, root cause, exploit conditions, or remediation for this CVE.
CVE-2011-0588
Adobe Reader/Acrobat is affected by an untrusted search path vulnerability (CVE-2011-0588) on Windows: local users can gain privileges via a Trojan horse DLL placed in the current working directory. Affected versions include Acrobat/Reader 10.x prior to 10.0.1, 9.x prior to 9.4.2, and 8.x prior t...
CVE-2015-3073
Technical details about CVE-2015-3073 are not provided in the connected EUVD entries. Please monitor ENISA EUVD records for updates; no specifics on affected products, vectors, or fixes are given.
CVE-2015-6723
Technical details about CVE-2015-6723 are not publicly available in the provided documents. Monitor for updates from vendor/security advisories.
CVE-2016-4191
Technical details about CVE-2016-4191 are not publicly available in the provided connected documents. Monitor for updates; no specifics on affected products, root cause, or remediation are available in the supplied sources.
CVE-2017-11219
Adobe Acrobat Reader 2017.x and earlier (versions listed in CVE-2017-11219 entry: 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier) contains an exploitable use-after-free in the XFA rendering engine. Successful exploitation could lead to ...
CVE-2017-11234
Technical details about CVE-2017-11234 are not provided in the supplied documents; no affected product/version/root-cause/impact are specified here. Monitor for updates.
CVE-2017-11243
Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier contains a memory corruption vulnerability in the XSLT engine. Successful exploitation could lead to arbitrary code execution. This CVE (CVE-2017-11243) affects multipl...
CVE-2017-11249
CVE-2017-11249 affects Adobe Acrobat Reader up to 2017.009.20058 and earlier (also listed older branches) where the image conversion engine can memory-corrupt while parsing an invalid EMF record. Successful exploitation could result in arbitrary code execution. The description specifies affected ...
CVE-2017-11262
Technical details for CVE-2017-11262 are not provided in the supplied documents. Monitor for updates.
CVE-2017-11269
CVE-2017-11269 affects multiple Adobe Acrobat products (Reader/DC/Classic/Pro) across Windows, Mac, and mobile tracks. The vulnerability is a memory corruption flaw in the image conversion engine when handling Enhanced Metafile Format (EMF) image stream data, enabling arbitrary code execution on ...
CVE-2017-3012
CVE-2017-3012 is part of Adobe Acrobat/Reader vulnerabilities disclosed under APSB17-11 and related entries. The Initial Description specifies an insecure library loading issue (DLL hijacking) in the OCR plugin affecting Acrobat Reader versions 11.x, 15.x sequences (older builds such as 11.0.19 a...
CVE-2017-3019
CVE-2017-3019 affects Adobe Acrobat Reader up to versions 11.0.19, 15.006.30280, and 15.023.20070, where the PRC (Product Representation Compact) format parser contains a memory corruption flaw. Successful exploitation could lead to arbitrary code execution on a vulnerable host. The provided docu...
CVE-2021-21059
CVE-2021-21059 affects Adobe Acrobat Reader DC , specifically versions 2020.013.20074 and earlier, 2020.001.30018 and earlier, and 2017.011.30188 and earlier. The underlying issue is a memory corruption vulnerability triggered while parsing a specially crafted PDF file. An unauthenticated attacke...
CVE-2021-44739
CVE-2021-44739 affects Acrobat Reader DC ActiveX Control, with NTLMv2 credential leakage via an Information Disclosure vulnerability in 21.007.20099 and earlier (also affects 20.004.30017 and 17.011.30204). Exploitation requires user interaction (open a malicious Office file or visit a crafted pa...
CVE-2022-35672
The CVE-2022-35672 entry describes an out-of-bounds read in Adobe Acrobat Reader when parsing a crafted file, potentially enabling code execution in the user’s context. Affected products/versions include Acrobat Reader 22.001.20085 and earlier, 20.005.30314 and earlier, and 17.012.30205 and earli...
CVE-2022-44517
Acrobat Reader DC (versions 22.001.20085 and earlier; 20.005.3031x and earlier; 17.012.30205 and earlier) is affected by an out-of-bounds read when parsing a crafted file, potentially bypassing ASLR. Exploitation requires user interaction (opening a malicious file). These details are supported by...
CVE-2023-38244
CVE-2023-38244 affects Adobe Acrobat Reader versions 23.003.20244 (and earlier) and 20.005.30467 (and earlier). The issue is an out-of-bounds read that could disclose memory and bypass mitigations such as ASLR. Exploitation requires user interaction (the victim must open a malicious file). The CV...
CVE-2024-30302
Adobe Acrobat Reader DC/Classic Continuous versions affected by CVE-2024-30302 contain a Use-After-Free vulnerability that could disclose memory and bypass ASLR. Exploitation requires user interaction (victim opens a malicious file); impact notes indicate memory disclosure with high confidentiali...
CVE-2009-3955
CVE-2009-3955 affects Adobe Reader and Acrobat 9.x prior to 9.3 and 8.x prior to 8.2 on Windows and macOS. The vulnerability is in the Jp2c/JPXDecode stream handling (JPC_MS_RGN marker) where an integer sign extension bypasses a sanity check, causing memory corruption that could allow remote code...
CVE-2011-2431
CVE-2011-2431 affects Adobe Reader/Acrobat: Adobe Reader and Acrobat 8.x before 8.3.1, 9.x before 9.4.6, and 10.x before 10.1.1 are vulnerable to arbitrary code execution via unspecified vectors (security bypass vulnerability). Connected advisories/documentation confirm that patches exist (e.g., ...
CVE-2014-0524
CVE-2014-0524 affects Adobe Reader and Acrobat 10.x (before 10.1.10) and 11.x (before 11.0.07) on Windows and macOS . The root cause is incorrect memory buffer allocation while parsing a corrupted PDF file , leading to arbitrary code execution or memory corruption (DoS) . Patches are available; u...
CVE-2015-4452
CVE-2015-4452 affectsAdobe Reader and Acrobat 10.x (pre-10.1.15) and 11.x (pre-11.0.12), plus Acrobat/Reader DC Classic pre-2015.006.30060 and DC Continuous pre-2015.008.20082 on Windows and macOS. The issue is a bypass of JavaScript API execution restrictions, exploitable via unspecified vectors...
CVE-2015-5089
Technical details for CVE-2015-5089 are not publicly available in the provided connected documents; monitor for updates.
CVE-2015-5583
This CVE (CVE-2015-5583) affects Adobe Reader and Acrobat when running on Windows or OS X, with vulnerable versions including Adobe Reader/Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat/Reader DC Classic before 2015.006.30094, and Acrobat/Reader DC Continuous before 2015.009.20069. ...
CVE-2016-1050
Technical details for CVE-2016-1050 are not provided in the supplied connected documents. Monitor for updates.
CVE-2017-11239
Technical details for CVE-2017-11239 are not publicly available in the provided documents. Monitor for updates from Adobe and vulnerability feeds; no product/version specifics or remediation are provided here.
CVE-2017-11254
Adobe Acrobat Reader/Acrobat (versions listed in CVE-2017-11254: 2017.009.20058 and earlier; 2017.008.30051 and earlier; 2015.006.30306 and earlier; and 11.0.20 and earlier) contains a use-after-free vulnerability in the JavaScript engine. The issue is exploitable and could lead to arbitrary code...