Acrobat Security Vulnerabilities and Issues — Acrobat CVE List

Lucene search

AdobeAcrobat

70 matches found

CVE•added 2021/09/02 5:15 p.m.•1145 views

CVE-2021-28550

Acrobat Reader DC versions versions 2021.001.20150 (and earlier), 2020.001.30020 (and earlier) and 2017.011.30194 (and earlier) are affected by a Use After Free vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the cur...

9.6CVSS8.3AI score0.21352EPSS

CVE•added 2021/02/11 8:15 p.m.•1058 views

CVE-2021-21017

Acrobat Reader DC versions versions 2020.013.20074 (and earlier), 2020.001.30018 (and earlier) and 2017.011.30188 (and earlier) are affected by a heap-based buffer overflow vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the contex...

8.8CVSS8.8AI score0.90595EPSS

CVE•added 2021/02/23 4:15 a.m.•125 views

CVE-2020-29075

Acrobat Reader DC versions 2020.013.20066 (and earlier), 2020.001.30010 (and earlier) and 2017.011.30180 (and earlier) are affected by an information exposure vulnerability, that could enable an attacker to get a DNS interaction and track if the user has opened or closed a PDF file when loaded from...

7.1CVSS6.1AI score0.00919EPSS

CVE•added 2021/10/15 3:15 p.m.•111 views

CVE-2021-40728

Adobe Acrobat Reader DC version 21.007.20095 (and earlier), 21.007.20096 (and earlier), 20.004.30015 (and earlier), and 17.011.30202 (and earlier) is affected by a use-after-free vulnerability in the processing of the GetURL function on a global object window that could result in arbitrary code exe...

7.8CVSS7.7AI score0.12116EPSS

CVE•added 2021/02/11 8:15 p.m.•104 views

CVE-2021-21044

Acrobat Reader DC versions versions 2020.013.20074 (and earlier), 2020.001.30018 (and earlier) and 2017.011.30188 (and earlier) are affected by an Out-of-bounds Write vulnerability when parsing a crafted jpeg file. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary c...

9.3CVSS8.1AI score0.04885EPSS

CVE•added 2021/02/11 8:15 p.m.•100 views

CVE-2021-21028

Acrobat Reader DC versions versions 2020.013.20074 (and earlier), 2020.001.30018 (and earlier) and 2017.011.30188 (and earlier) are affected by a Use After Free vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the cur...

8.8CVSS8.7AI score0.20298EPSS

CVE•added 2021/02/11 8:15 p.m.•97 views

CVE-2021-21045

Acrobat Reader DC versions versions 2020.013.20074 (and earlier), 2020.001.30018 (and earlier) and 2017.011.30188 (and earlier) are affected by an improper access control vulnerability. An unauthenticated attacker could leverage this vulnerability to elevate privileges in the context of the current...

9.3CVSS7.9AI score0.01019EPSS

CVE•added 2021/09/29 4:15 p.m.•96 views

CVE-2021-39863

Acrobat Reader DC versions 2021.005.20060 (and earlier), 2020.004.30006 (and earlier) and 2017.011.30199 (and earlier) are affected by a Buffer Overflow vulnerability when parsing a specially crafted PDF file. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code e...

7.8CVSS7.6AI score0.11948EPSS

CVE•added 2021/09/02 5:15 p.m.•95 views

CVE-2021-28565

Acrobat Reader DC versions versions 2021.001.20150 (and earlier), 2020.001.30020 (and earlier) and 2017.011.30194 (and earlier) are affected by an Out-of-bounds Read vulnerability in the PDFLibTool component. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code ex...

9.3CVSS6.4AI score0.11804EPSS

CVE•added 2021/02/11 8:15 p.m.•94 views

CVE-2021-21038

7.8CVSS8.1AI score0.04146EPSS

CVE•added 2021/09/29 4:15 p.m.•86 views

CVE-2021-39836

Acrobat Reader DC versions 2021.005.20060 (and earlier), 2020.004.30006 (and earlier) and 2017.011.30199 (and earlier) are affected by a use-after-free vulnerability in the processing of the AcroForm buttonGetIcon action that could result in arbitrary code execution in the context of the current us...

7.8CVSS7.6AI score0.56988EPSS

CVE•added 2021/08/24 6:15 p.m.•83 views

CVE-2021-28551

Acrobat Reader DC versions versions 2021.001.20155 (and earlier), 2020.001.30025 (and earlier) and 2017.011.30196 (and earlier) are affected by an Out-of-bounds read vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of th...

7.8CVSS7.5AI score0.24697EPSS

CVE•added 2021/08/24 6:15 p.m.•81 views

CVE-2021-28632

Acrobat Reader DC versions versions 2021.001.20155 (and earlier), 2020.001.30025 (and earlier) and 2017.011.30196 (and earlier) are affected by an Use After Free vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the cu...

7.8CVSS7.6AI score0.43405EPSS

CVE•added 2021/04/01 2:15 p.m.•80 views

CVE-2021-28545

Acrobat Reader DC versions versions 2020.013.20074 (and earlier), 2020.001.30018 (and earlier) and 2017.011.30188 (and earlier) are missing support for an integrity check. An unauthenticated attacker would have the ability to completely manipulate data in a certified PDF without invalidating the or...

8.1CVSS7.8AI score0.01636EPSS

CVE•added 2021/02/11 8:15 p.m.•79 views

CVE-2021-21042

Acrobat Reader DC versions 2020.013.20074 (and earlier), 2020.001.30018 (and earlier) and 2017.011.30188 (and earlier) are affected by an Out-of-bounds Read vulnerability that could lead to arbitrary disclosure of information in the memory stack. An attacker could leverage this vulnerability to byp...

6.5CVSS6.2AI score0.44966EPSS

CVE•added 2021/02/11 8:15 p.m.•78 views

CVE-2021-21046

Acrobat Reader DC versions versions 2020.013.20074 (and earlier), 2020.001.30018 (and earlier) and 2017.011.30188 (and earlier) are affected by an memory corruption vulnerability. An unauthenticated attacker could leverage this vulnerability to cause an application denial-of-service. Exploitation o...

4.3CVSS5.7AI score0.011EPSS

CVE•added 2021/10/15 3:15 p.m.•77 views

CVE-2021-40731

Adobe Acrobat Reader DC version 21.007.20095 (and earlier), 21.007.20096 (and earlier), 20.004.30015 (and earlier), and 17.011.30202 (and earlier) is affected by an out-of-bounds write vulnerability when parsing a crafted JPEG2000 file, which could result in arbitrary code execution in the context ...

7.8CVSS7.7AI score0.05762EPSS

CVE•added 2021/02/11 8:15 p.m.•76 views

CVE-2021-21021

8.8CVSS8.7AI score0.1344EPSS

CVE•added 2021/09/02 4:15 p.m.•76 views

CVE-2021-21086

Acrobat Reader DC versions versions 2020.013.20074 (and earlier), 2020.001.30018 (and earlier) and 2017.011.30188 (and earlier) are affected by an Out-of-bounds Write vulnerability in the CoolType library. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execu...

7.8CVSS7.8AI score0.11755EPSS

CVE•added 2021/09/02 5:15 p.m.•76 views

CVE-2021-28564

Acrobat Reader DC versions versions 2021.001.20150 (and earlier), 2020.001.30020 (and earlier) and 2017.011.30194 (and earlier) are affected by an Out-of-bounds Write vulnerability within the ImageTool component. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary cod...

8.8CVSS8.6AI score0.31079EPSS

CVE•added 2021/02/11 8:15 p.m.•75 views

CVE-2021-21035

8.8CVSS8.7AI score0.1344EPSS

CVE•added 2021/10/15 3:15 p.m.•75 views

CVE-2021-40729

Adobe Acrobat Reader DC version 21.007.20095 (and earlier), 21.007.20096 (and earlier), 20.004.30015 (and earlier), and 17.011.30202 (and earlier) is affected by a out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to by...

4.3CVSS3.5AI score0.0034EPSS

CVE•added 2021/02/11 9:15 p.m.•74 views

CVE-2021-21058

Acrobat Reader DC versions versions 2020.013.20074 (and earlier), 2020.001.30018 (and earlier) and 2017.011.30188 (and earlier) are affected by a Memory corruption vulnerability when parsing a specially crafted PDF file. An unauthenticated attacker could leverage this vulnerability to achieve arbit...

9.3CVSS8.3AI score0.02483EPSS

CVE•added 2021/02/11 8:15 p.m.•73 views

CVE-2021-21037

Acrobat Reader DC versions versions 2020.013.20074 (and earlier), 2020.001.30018 (and earlier) and 2017.011.30188 (and earlier) are affected by a Path Traversal vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the cur...

7.8CVSS7.9AI score0.12384EPSS

CVE•added 2021/09/29 4:15 p.m.•72 views

CVE-2021-39855

Acrobat Reader DC ActiveX Control versions 2021.005.20060 (and earlier), 2020.004.30006 (and earlier) and 2017.011.30199 (and earlier) are affected by an Information Disclosure vulnerability. An unauthenticated attacker could leverage this vulnerability to obtain NTLMv2 credentials. Exploitation of...

6.5CVSS6.3AI score0.02023EPSS

CVE•added 2021/02/11 9:15 p.m.•71 views

CVE-2021-21059

9.3CVSS8.3AI score0.0446EPSS

CVE•added 2021/08/24 6:15 p.m.•71 views

CVE-2021-28554

Acrobat Reader DC versions versions 2021.001.20155 (and earlier), 2020.001.30025 (and earlier) and 2017.011.30196 (and earlier) are affected by an Out-of-bounds Read vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of th...

7.8CVSS7.6AI score0.33254EPSS

CVE•added 2021/02/11 8:15 p.m.•70 views

CVE-2021-21033

8.8CVSS8.7AI score0.1344EPSS

CVE•added 2021/02/11 8:15 p.m.•70 views

CVE-2021-21039

7.8CVSS8.2AI score0.13785EPSS

CVE•added 2021/09/29 4:15 p.m.•70 views

CVE-2021-39849

Acrobat Reader DC versions 2021.005.20060 (and earlier), 2020.004.30006 (and earlier) and 2017.011.30199 (and earlier) are affected by a Null pointer dereference vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve an application denial-of-service in the context o...

5.5CVSS5.6AI score0.01014EPSS

CVE•added 2021/09/29 4:15 p.m.•70 views

CVE-2021-39852

5.5CVSS5.6AI score0.01014EPSS

CVE•added 2021/02/11 8:15 p.m.•69 views

CVE-2021-21057

Acrobat Reader DC versions versions 2020.013.20074 (and earlier), 2020.001.30018 (and earlier) and 2017.011.30188 (and earlier) are affected by a null pointer dereference vulnerability when parsing a specially crafted PDF file. An unauthenticated attacker could leverage this vulnerability to achiev...

6.6CVSS6.9AI score0.00648EPSS

CVE•added 2021/02/11 9:15 p.m.•69 views

CVE-2021-21063

9.3CVSS8.3AI score0.02483EPSS

CVE•added 2021/04/01 2:15 p.m.•69 views

CVE-2021-28546

Acrobat Reader DC versions versions 2020.013.20074 (and earlier), 2020.001.30018 (and earlier) and 2017.011.30188 (and earlier) are missing support for an integrity check. An unauthenticated attacker could leverage this vulnerability to modify content in a certified PDF without invalidating the cer...

6.5CVSS6.8AI score0.00401EPSS

CVE•added 2021/08/24 6:15 p.m.•69 views

CVE-2021-28631

7.8CVSS7.6AI score0.43405EPSS

CVE•added 2021/10/15 3:15 p.m.•69 views

CVE-2021-40730

Adobe Acrobat Reader DC version 21.007.20095 (and earlier), 21.007.20096 (and earlier), 20.004.30015 (and earlier), and 17.011.30202 (and earlier) is affected by a use-after-free that allow a remote attacker to disclose sensitive information on affected installations of of Adobe Acrobat Reader DC. ...

4.3CVSS4.8AI score0.01226EPSS

CVE•added 2021/08/24 6:15 p.m.•68 views

CVE-2021-28552

7.8CVSS7.6AI score0.08881EPSS

CVE•added 2021/02/11 8:15 p.m.•67 views

CVE-2021-21040

7.8CVSS7.9AI score0.13785EPSS

CVE•added 2021/02/11 8:15 p.m.•67 views

CVE-2021-21041

Acrobat Reader DC versions versions 2020.013.20074 (and earlier), 2020.001.30018 (and earlier) and 2017.011.30188 (and earlier) are affected by a use-after-free vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the cur...

7.8CVSS7.9AI score0.13785EPSS

CVE•added 2021/02/11 8:15 p.m.•67 views

CVE-2021-21061

Acrobat Pro DC versions versions 2020.013.20074 (and earlier), 2020.001.30018 (and earlier) and 2017.011.30188 (and earlier) are affected by a Use-after-free vulnerability when parsing a specially crafted PDF file. An unauthenticated attacker could leverage this vulnerability to disclose sensitive ...

4.3CVSS5.3AI score0.0161EPSS

CVE•added 2021/09/02 5:15 p.m.•67 views

CVE-2021-28559

Acrobat Reader DC versions versions 2021.001.20150 (and earlier), 2020.001.30020 (and earlier) and 2017.011.30194 (and earlier) are affected by an Information Exposure vulnerability. An unauthenticated attacker could leverage this vulnerability to get access to restricted data stored within global ...

5.3CVSS6.4AI score0.00861EPSS

CVE•added 2021/09/29 4:15 p.m.•67 views

CVE-2021-39860

Acrobat Pro DC versions 2021.005.20060 (and earlier), 2020.004.30006 (and earlier) and 2017.011.30199 (and earlier) are affected by a Null pointer dereference vulnerability. An unauthenticated attacker could leverage this vulnerability to disclose sensitive user memory. Exploitation of this issue r...

5.5CVSS5.8AI score0.0175EPSS

CVE•added 2021/02/11 8:15 p.m.•66 views

CVE-2021-21034

Acrobat Reader DC versions versions 2020.013.20074 (and earlier), 2020.001.30018 (and earlier) and 2017.011.30188 (and earlier) are affected by an Out-of-bounds Read vulnerability. An unauthenticated attacker could leverage this vulnerability to locally elevate privileges in the context of the curr...

4.3CVSS4.4AI score0.01012EPSS

CVE•added 2021/09/02 5:15 p.m.•66 views

CVE-2021-28553

Acrobat Reader DC versions versions 2021.001.20150 (and earlier), 2020.001.30020 (and earlier) and 2017.011.30194 (and earlier) are affected by an Use After Free vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the cu...

8.8CVSS8.7AI score0.42437EPSS

CVE•added 2021/09/02 5:15 p.m.•66 views

CVE-2021-28560

Acrobat Reader DC versions versions 2021.001.20150 (and earlier), 2020.001.30020 (and earlier) and 2017.011.30194 (and earlier) are affected by a Heap-based Buffer Overflow vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the contex...

8.8CVSS8.7AI score0.37349EPSS

CVE•added 2021/02/11 8:15 p.m.•65 views

CVE-2021-21036

Acrobat Reader DC versions versions 2020.013.20074 (and earlier), 2020.001.30018 (and earlier) and 2017.011.30188 (and earlier) are affected by an Integer Overflow vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the ...

7.8CVSS7.9AI score0.07081EPSS

CVE•added 2021/02/11 9:15 p.m.•65 views

CVE-2021-21062

9.3CVSS8.3AI score0.02483EPSS

CVE•added 2021/02/11 8:15 p.m.•64 views

CVE-2021-21060

Adobe Acrobat Pro DC versions 2020.013.20074 (and earlier), 2020.001.30018 (and earlier) and 2017.011.30188 (and earlier) are affected by an improper input validation vulnerability. An unauthenticated attacker could leverage this vulnerability to disclose sensitive information in the context of the...

4.6CVSS5.8AI score0.00232EPSS

CVE•added 2021/09/29 4:15 p.m.•64 views

CVE-2021-39857

Adobe Acrobat Reader DC add-on for Internet Explorer versions 2021.005.20060 (and earlier), 2020.004.30006 (and earlier) and 2017.011.30199 (and earlier) are affected by an Information Disclosure vulnerability. An unauthenticated attacker could leverage this vulnerability to check for existence of ...

4.3CVSS5.2AI score0.01153EPSS

CVE•added 2021/09/02 5:15 p.m.•63 views

CVE-2021-28557

Acrobat Reader DC versions versions 2021.001.20150 (and earlier), 2020.001.30020 (and earlier) and 2017.011.30194 (and earlier) are affected by an Out-of-bounds Read vulnerability. An unauthenticated attacker could leverage this vulnerability to leak sensitive system information in the context of t...

4.3CVSS5.6AI score0.01316EPSS

Total number of security vulnerabilities70