CVE-2017-11243

Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier contains a memory corruption vulnerability in the XSLT engine. Successful exploitation could lead to arbitrary code execution. This CVE (CVE-2017-11243) affects multipl...

CVE-2017-11254

Adobe Acrobat Reader/Acrobat (versions listed in CVE-2017-11254: 2017.009.20058 and earlier; 2017.008.30051 and earlier; 2015.006.30306 and earlier; and 11.0.20 and earlier) contains a use-after-free vulnerability in the JavaScript engine. The issue is exploitable and could lead to arbitrary code...

CVE-2017-11261

Technical details for CVE-2017-11261 are not publicly available in the provided documents. Monitor for updates from Adobe advisories and CVE databases.

CVE-2017-11262

Technical details for CVE-2017-11262 are not provided in the supplied documents. Monitor for updates.

CVE-2017-3012

CVE-2017-3012 is part of Adobe Acrobat/Reader vulnerabilities disclosed under APSB17-11 and related entries. The Initial Description specifies an insecure library loading issue (DLL hijacking) in the OCR plugin affecting Acrobat Reader versions 11.x, 15.x sequences (older builds such as 11.0.19 a...

CVE-2017-3021

CVE-2017-3021 : Adobe Acrobat Reader (Windows, Mac, and other platforms) versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier are affected by a memory address leak in the JPEG 2000 parser engine. The CVE is listed with a low overall impact in the CVSS vector, and there...

CVE-2021-28559

Technical details about CVE-2021-28559 are not provided in the connected documents. The OpenVAS entries reference the CVE in broader Adobe vulnerability contexts but do not specify affected products, versions, impact, or fixes. Monitor for updates.

CVE-2021-28564

Technical details specific to CVE-2021-28564 are not provided in the connected documents. The materials reference Adobe Acrobat vulnerabilities generally; monitor for updates.

CVE-2009-2998

Adobe Reader/Acrobat vulnerable component: input validation flaw that could allow arbitrary code execution in affected 7.x (pre-7.1.4), 8.x (pre-8.1.7), and 9.x (pre-9.2). Connected advisories (RHSA-2009:1499, SUSE/OpenVAS entries) confirm upstream patching and fixes were released (Adobe Reader u...

CVE-2015-4451

Technical details for CVE-2015-4451 are not publicly provided in the supplied documents. Monitor for updates.

CVE-2015-5087

CVSS-10.0 CVE-2015-5087 affects Adobe Reader and Acrobat 10.x (<10.1.15; <11.0.12) and Acrobat/Reader DC Classic (<2015.006.30060) and Continuous (

CVE-2015-5583

This CVE (CVE-2015-5583) affects Adobe Reader and Acrobat when running on Windows or OS X, with vulnerable versions including Adobe Reader/Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat/Reader DC Classic before 2015.006.30094, and Acrobat/Reader DC Continuous before 2015.009.20069. ...

CVE-2015-6709

CVE-2015-6709 affects Adobe Reader and Acrobat: Intel/Windows and OS X platforms with versions listed in the initial description (Adobe Reader/Acrobat 10.x up to 10.1.16; 11.x up to 11.0.13; Acrobat/Reader DC Classic before 2015.006.30094; DC Continuous before 2015.009.20069). The issue allows at...

CVE-2016-1050

Technical details for CVE-2016-1050 are not provided in the supplied connected documents. Monitor for updates.

CVE-2016-4198

Technical details for CVE-2016-4198 are not publicly provided in the supplied documents. Monitor for updates from official advisories; no product, impact, or remediation specifics are stated here.

CVE-2017-11210

Adobe Acrobat/Reader 2017-family products are affected by CVE-2017-11210, a memory corruption vulnerability in the font parsing when a font is embedded in an XPS file. Successful exploitation could lead to arbitrary code execution. Affected versions include Acrobat Reader 2017.009.20058 and earli...

CVE-2017-11231

CVE-2017-11231 concerns Adobe Acrobat/Reader. Exploitation targets the Acrobat/Reader rendering engine via a use-after-free in affected versions (Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier), with potential for a...

CVE-2017-11236

Technical details about CVE-2017-11236 are not publicly provided in the supplied documents. Monitor for updates from Adobe security advisories and vulnerability feeds.

CVE-2017-16365

Adobe Acrobat/Reader (2017 and earlier, including 2017.x) is affected by CVE-2017-16365 due to a buffer over-read in the True Type2 Font parsing module caused by a corrupted cmap input, which leads to pointer arithmetic outside the buffer. Impact per the entry: attacker can obtain sensitive infor...

CVE-2017-3024

CVE-2017-3024 affects Adobe Acrobat Reader (versions 11.0.19 and earlier; 15.006.30280 and earlier; 15.023.20070 and earlier) with a memory corruption vulnerability when manipulating PDF annotations. Successful exploitation could lead to arbitrary code execution. Root cause: memory corruption dur...

CVE-2021-21037

CVE-2021-21037 (Adobe Acrobat Reader DC) is a path traversal vulnerability affecting multiple versions (e.g., 2020.013.20074 and earlier, 2020.001.30018 and earlier, 2017.011.30188 and earlier) that can lead to arbitrary code execution in the context of the current user after opening a malicious ...

CVE-2021-21060

CVE-2021-21060 affects Adobe Acrobat Pro DC and related Reader DC components, via improper input validation that could disclose sensitive user information. Exploitation requires a victim to open a malicious file, with the attacker not requiring authentication. Affected versions include Acrobat/Re...

CVE-2021-44711

CVE-2021-44711 affects Adobe Acrobat Reader DC and related components (versions 21.007.20099 and earlier; 20.004.30017 and earlier; 17.011.30204 and earlier) with an Integer Overflow/Wraparound in annotation gestures that can lead to arbitrary code execution under the current user. Exploitation r...

CVE-2023-26425

Technical details for CVE-2023-26425 are not publicly available in the provided documents. The connected sources reference the vulnerability broadly but do not specify affected product versions, root cause, impact, or remediation. Monitor for updates.

CVE-2025-27164

CVE-2025-27164 affects Acrobat Reader with an out-of-bounds read in memory that can disclose memory contents and bypass ASLR. Affected versions include 24.001.30225, 20.005.30748, 25.001.20428 and earlier; exploitation requires user interaction (victim opens a malicious file). Root cause is an ou...

CVE-2008-4816

CVE-2008-4816 concerns the Download Manager in Adobe Reader 8.1.2 and earlier on Windows. The vulnerability is described as unspecified, enabling remote attackers to change Internet Security options on a client machine via unknown vectors. The connected documents confirm the affected product/vers...

CVE-2009-0509

The CVE-2009-0509 entry describes a heap-based buffer overflow in the JBIG2 filter that causes memory corruption and remote code execution. Affected products are Adobe Reader 7 and Acrobat 7 before 7.1.3, Adobe Reader 8 and Acrobat 8 before 8.1.6, and Adobe Reader 9 and Acrobat 9 before 9.1.2. Re...

CVE-2010-1295

Technical details about CVE-2010-1295 are not publicly available in the provided documents. No specific affected product versions, root cause, or mitigation are included beyond generic description; monitor for updates.

CVE-2011-0598

Adobe Reader/Acrobat is affected by an integer overflow in ACE.dll triggered by crafted ICC data, enabling remote code execution. Affected products/versions: Acrobat/Reader 8.x before 8.2.6, 9.x before 9.4.2, and 10.x before 10.0.1 on Windows and macOS. The vulnerability is distinct from CVE-2011...

CVE-2013-0611

CVE-2013-0611 affects Adobe Reader and Acrobat: 9.x before 9.5.3, 10.x before 10.1.5, and 11.x before 11.0.1. The description cites that it allows arbitrary code execution via an unspecified vector due to a logic error, and notes it is a different vulnerability from CVE-2013-0607, CVE-2013-0608, ...

CVE-2014-0521

CVE-2014-0521 affects Adobe Reader and Acrobat on Windows and OS X (10.x older than 10.1.10 and 11.x older than 11.0.07). The root cause is improper handling of JavaScript APIs in PDFs, enabling remote attackers to disclose sensitive information via crafted PDFs. Connected advisories (APSB14-15) ...

CVE-2016-0931

CVE-2016-0931 affects Adobe Reader and Acrobat on Windows and macOS. Vulnerable products include: Acrobat/Reader 11.x prior to 11.0.14; Acrobat and Acrobat Reader DC Classic prior to 15.006.30119; Acrobat and Acrobat Reader DC Continuous prior to 15.010.20056. The flaw is triggered via a crafted ...

CVE-2016-1069

Technical details for CVE-2016-1069 are not publicly available in the provided documents. Monitor for updates from vendors and security advisories.

CVE-2016-4195

Technical details about CVE-2016-4195 are not publicly available in the provided connected documents. Monitor for updates for any concrete information (affected products/versions, root cause, impact, or fixes) as new disclosures may appear.

CVE-2017-11229

Technical details for CVE-2017-11229 are not provided in the supplied connected documents; information about affected products, exploitability, or remediation is not available here. Monitor for updates.

CVE-2017-11259

No technical details about CVE-2017-11259 are provided in the connected documents. The sources present do not specify affected products/versions, root cause, exploit status, or remediation beyond the general description.

CVE-2017-11308

CVE-2017-11308 affects Adobe Acrobat and Reader: versions 2017.012.20098 and earlier, 2017.011.30066 and earlier, 2015.006.30355 and earlier, and 11.0.22 and earlier. The vulnerability is a heap overflow that could allow arbitrary code execution in the context of the current user after successful...

CVE-2017-16362

Technical details about CVE-2017-16362 are not provided in the supplied documents. Public information appears limited to vulnerability description and CVSS metrics; monitor for updates from official advisories for affected products, impact, and fixes.

CVE-2017-16401

Technical details for CVE-2017-16401 are not publicly provided in the supplied documents. Monitor for updates from Adobe and vulnerability trackers.

CVE-2017-2950

CVE-2017-2950 is an exploitable use-after-free vulnerability in Adobe Acrobat/Reader’s XFA engine (layout functionality). Affected on Windows and macOS/Linux versions include 15.020.20042 and earlier, 15.006.30244 and earlier, and 11.0.18 and earlier. Successful exploitation could lead to arbitra...

CVE-2017-3011

CVE-2017-3011 affects Adobe Acrobat Reader (versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier). The vulnerability is an exploitable integer overflow in the CCITT fax PDF filter that could lead to arbitrary code execution. The connected documents do not provide addit...

CVE-2017-3055

CVE-2017-3055 affects Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, and 15.023.20070 and earlier. The vulnerability is an exploitable heap overflow in JPEG 2000 parsing of the fragment list tag, which could lead to arbitrary code execution. The description does not ...

CVE-2017-3121

CVE-2017-3121 affects Adobe Acrobat/Reader with memory corruption in the Enhanced Metafile Format (EMF) parser. Affected products include Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier. Exploitation could lead to arbitrar...

CVE-2020-24434

CVE-2020-24434 is an out-of-bounds read vulnerability in Adobe Acrobat/Reader (Acrobat Reader DC and Acrobat Pro DC) affecting versions such as 2020.012.20048 and earlier, 2020.001.30005 and earlier, and 2017.011.30175 and earlier. The root cause is an out-of-bounds read that could disclose sensi...

CVE-2021-21063

CVE-2021-21063 affects Adobe Acrobat Reader DC versions <= 2020.013.20074, <= 2020.001.30018, and

CVE-2021-28560

Technical details for CVE-2021-28560 are not publicly provided in the connected documents; monitor for updates.

CVE-2023-21606

CVE-2023-21606 – Adobe Acrobat/Reader out-of-bounds write (font parsing) . Affects Adobe Acrobat Reader DC/Viewer versions including 22.003.20282 and earlier, 22.003.20281 and earlier, and 20.005.30418 and earlier. The root cause is an out-of-bounds write in font parsing that can lead to arbitrar...

CVE-2023-26424

Summary: CVE-2023-26424 affects Adobe Acrobat Reader up to versions 23.001.20093 and 20.005.30441 (and earlier). It is a Use-After-Free vulnerability that could allow arbitrary code execution in the context of the current user. Exploitation requires user interaction, as a victim must open a malic...

CVE-2024-30311

The CVE-2024-30311 issue affects Adobe Acrobat Reader versions 20.005.30574, 24.002.20736 and earlier. It is a buffer/out-of-bounds read vulnerability that can disclose memory and potentially bypass ASLR. Exploitation requires user interaction (the victim must open a malicious file). There is no ...

CVE-2026-47914

CVE-2026-47914 affects Acrobat Reader versions 24.001.30365, 26.001.21651 and earlier. The issue is a Use After Free (CWE-416) vulnerability that could allow arbitrary code execution in the context of the current user. Exploitation requires user interaction: a victim must open a malicious file. C...