Adobe Acrobat vulnerabilities
1,413 known vulnerabilities affecting adobe/acrobat.
Total CVEs
1,413
CISA KEV
24
actively exploited
Public exploits
46
Exploited in wild
42
Severity breakdown
CRITICAL538HIGH516MEDIUM333LOW26
Vulnerabilities
Page 16 of 71
CVE-2017-11269P3HIGHCVSS 8.8≥ 11.0.0, ≤ 11.0.20≥ 17.011.00000, ≤ 17.011.300662017-08-11
CVE-2017-11269 [HIGH] CWE-119 CVE-2017-11269: Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earl
Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable memory corruption vulnerability in the image conversion engine when processing Enhanced Metafile Format (EMF) image stream data. Successful exploitation could lead to arbitrary code execution.
nvd
CVE-2017-11262P3HIGHCVSS 8.8≥ 11.0.0, ≤ 11.0.20≥ 17.011.00000, ≤ 17.011.300662017-08-11
CVE-2017-11262 [HIGH] CWE-119 CVE-2017-11262: Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earl
Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable memory corruption vulnerability in the image conversion engine when processing Enhanced Metafile Format (EMF) data related to drawing ASCII text string. Successful exploitation could lead to arbitrary code
nvd
CVE-2017-11214P3HIGHCVSS 8.8≥ 11.0.0, ≤ 11.0.20≥ 17.011.00000, ≤ 17.011.300662017-08-11
CVE-2017-11214 [HIGH] CWE-119 CVE-2017-11214: Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earl
Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable memory corruption vulnerability in the image conversion engine when processing Enhanced Metafile Format (EMF) data related to rendering a path. Successful exploitation could lead to arbitrary code executio
nvd
CVE-2017-11267P3HIGHCVSS 8.8≥ 11.0.0, ≤ 11.0.20≥ 17.011.00000, ≤ 17.011.300662017-08-11
CVE-2017-11267 [HIGH] CWE-119 CVE-2017-11267: Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earl
Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable memory corruption vulnerability in the image conversion engine when processing Enhanced Metafile Format (EMF) private data interpreted as JPEG data. Successful exploitation could lead to arbitrary code exe
nvd
CVE-2017-11226P3HIGHCVSS 8.8≥ 11.0.0, ≤ 11.0.20≥ 17.011.00000, ≤ 17.011.300662017-08-11
CVE-2017-11226 [HIGH] CWE-119 CVE-2017-11226: Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earl
Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable memory corruption vulnerability in the image processing engine when processing JPEG 2000 (JP2) code stream data. Successful exploitation could lead to arbitrary code execution.
nvd
CVE-2016-4095P3CRITICALCVSS 9.8≤ 11.0.172016-11-10
CVE-2016-4095 [CRITICAL] CWE-119 CVE-2016-4095: Adobe Reader and Acrobat before 11.0.18, Acrobat and Acrobat Reader DC Classic before 15.006.30243,
Adobe Reader and Acrobat before 11.0.18, Acrobat and Acrobat Reader DC Classic before 15.006.30243, and Acrobat and Acrobat Reader DC Continuous before 15.020.20039 on Windows and OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.
nvd
CVE-2014-8446P3CRITICALCVSS 10.0v10.0v10.0.1+25 more2014-12-10
CVE-2014-8446 [CRITICAL] CVE-2014-8446: Adobe Reader and Acrobat 10.x before 10.1.13 and 11.x before 11.0.10 on Windows and OS X allow attac
Adobe Reader and Acrobat 10.x before 10.1.13 and 11.x before 11.0.10 on Windows and OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2014-8445, CVE-2014-8447, CVE-2014-8456, CVE-2014-8458, CVE-2014-8459, CVE-2014-8461, and CVE-2014-9158.
nvd
CVE-2015-3075P3CRITICALCVSS 10.0v10.1.0v10.1.1+23 more2015-05-13
CVE-2015-3075 [CRITICAL] CVE-2015-3075: Use-after-free vulnerability in Adobe Reader and Acrobat 10.x before 10.1.14 and 11.x before 11.0.11
Use-after-free vulnerability in Adobe Reader and Acrobat 10.x before 10.1.14 and 11.x before 11.0.11 on Windows and OS X allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-3053, CVE-2015-3054, CVE-2015-3055, and CVE-2015-3059.
nvd
CVE-2009-3954P3CRITICALCVSS 10.0≤ 9.2v3.0+45 more2010-01-13
CVE-2009-3954 [CRITICAL] CWE-94 CVE-2009-3954: The 3D implementation in Adobe Reader and Acrobat 9.x before 9.3, and 8.x before 8.2 on Windows and
The 3D implementation in Adobe Reader and Acrobat 9.x before 9.3, and 8.x before 8.2 on Windows and Mac OS X, might allow attackers to execute arbitrary code via unspecified vectors, related to a "DLL-loading vulnerability."
nvd
CVE-2014-8461P3CRITICALCVSS 10.0v10.0v10.0.1+25 more2014-12-10
CVE-2014-8461 [CRITICAL] CVE-2014-8461: Adobe Reader and Acrobat 10.x before 10.1.13 and 11.x before 11.0.10 on Windows and OS X allow attac
Adobe Reader and Acrobat 10.x before 10.1.13 and 11.x before 11.0.10 on Windows and OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2014-8445, CVE-2014-8446, CVE-2014-8447, CVE-2014-8456, CVE-2014-8458, CVE-2014-8459, and CVE-2014-9158.
nvd
CVE-2014-8458P3CRITICALCVSS 10.0v10.0v10.0.1+25 more2014-12-10
CVE-2014-8458 [CRITICAL] CVE-2014-8458: Adobe Reader and Acrobat 10.x before 10.1.13 and 11.x before 11.0.10 on Windows and OS X allow attac
Adobe Reader and Acrobat 10.x before 10.1.13 and 11.x before 11.0.10 on Windows and OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2014-8445, CVE-2014-8446, CVE-2014-8447, CVE-2014-8456, CVE-2014-8459, CVE-2014-8461, and CVE-2014-9158.
nvd
CVE-2014-8459P3CRITICALCVSS 10.0v10.0v10.0.1+25 more2014-12-10
CVE-2014-8459 [CRITICAL] CVE-2014-8459: Adobe Reader and Acrobat 10.x before 10.1.13 and 11.x before 11.0.10 on Windows and OS X allow attac
Adobe Reader and Acrobat 10.x before 10.1.13 and 11.x before 11.0.10 on Windows and OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2014-8445, CVE-2014-8446, CVE-2014-8447, CVE-2014-8456, CVE-2014-8458, CVE-2014-8461, and CVE-2014-9158.
nvd
CVE-2014-8447P3CRITICALCVSS 10.0v10.0v10.0.1+25 more2014-12-10
CVE-2014-8447 [CRITICAL] CVE-2014-8447: Adobe Reader and Acrobat 10.x before 10.1.13 and 11.x before 11.0.10 on Windows and OS X allow attac
Adobe Reader and Acrobat 10.x before 10.1.13 and 11.x before 11.0.10 on Windows and OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2014-8445, CVE-2014-8446, CVE-2014-8456, CVE-2014-8458, CVE-2014-8459, CVE-2014-8461, and CVE-2014-9158.
nvd
CVE-2014-8456P3CRITICALCVSS 10.0v10.0v10.0.1+25 more2014-12-10
CVE-2014-8456 [CRITICAL] CVE-2014-8456: Adobe Reader and Acrobat 10.x before 10.1.13 and 11.x before 11.0.10 on Windows and OS X allow attac
Adobe Reader and Acrobat 10.x before 10.1.13 and 11.x before 11.0.10 on Windows and OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2014-8445, CVE-2014-8446, CVE-2014-8447, CVE-2014-8458, CVE-2014-8459, CVE-2014-8461, and CVE-2014-9158.
nvd
CVE-2014-8445P3CRITICALCVSS 10.0v10.0v10.0.1+25 more2014-12-10
CVE-2014-8445 [CRITICAL] CWE-94 CVE-2014-8445: Adobe Reader and Acrobat 10.x before 10.1.13 and 11.x before 11.0.10 on Windows and OS X allow attac
Adobe Reader and Acrobat 10.x before 10.1.13 and 11.x before 11.0.10 on Windows and OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2014-8446, CVE-2014-8447, CVE-2014-8456, CVE-2014-8458, CVE-2014-8459, CVE-2014-8461, and CVE-2014-9158.
nvd
CVE-2017-11293P3CRITICALCVSS 9.8≤ 11.0.22≥ 17.0, ≤ 17.011.300662017-12-09
CVE-2017-11293 [CRITICAL] CWE-119 CVE-2017-11293: An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.3
An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versions, and 11.0.22 and earlier versions. An exploitable memory corruption vulnerability exists. Successful exploitation could lead to arbitrary code execution.
nvd
CVE-2012-0776P3CRITICALCVSS 10.0v9.0v9.1+25 more2012-04-10
CVE-2012-0776 [CRITICAL] CWE-264 CVE-2012-0776: The installer in Adobe Reader 9.x before 9.5.1 and 10.x before 10.1.3 allows attackers to bypass int
The installer in Adobe Reader 9.x before 9.5.1 and 10.x before 10.1.3 allows attackers to bypass intended access restrictions and execute arbitrary code via unspecified vectors.
nvd
CVE-2017-3124P3CRITICALCVSS 9.8≥ 11.0.0, < 11.0.212017-08-11
CVE-2017-3124 [CRITICAL] CWE-119 CVE-2017-3124: Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earl
Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable memory corruption vulnerability in the picture exchange (PCX) file format parsing module. Successful exploitation could lead to arbitrary code execution.
nvd
CVE-2011-0599P3CRITICALCVSS 9.3v8.0v8.1+26 more2011-02-10
CVE-2011-0599 [CRITICAL] CVE-2011-0599: The Bitmap parsing component in rt3d.dll in Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before
The Bitmap parsing component in rt3d.dll in Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Windows and Mac OS X allow remote attackers to execute arbitrary code via a crafted image that causes an invalid pointer calculation related to 4/8-bit RLE compression, a different vulnerability than CVE-2011-0596, CVE-2011-0598,
nvd
CVE-2009-0509P3CRITICALCVSS 9.3v7.0v7.0.1+21 more2009-06-11
CVE-2009-0509 [CRITICAL] CWE-119 CVE-2009-0509: Heap-based buffer overflow in the JBIG2 filter in Adobe Reader 7 and Acrobat 7 before 7.1.3, Adobe R
Heap-based buffer overflow in the JBIG2 filter in Adobe Reader 7 and Acrobat 7 before 7.1.3, Adobe Reader 8 and Acrobat 8 before 8.1.6, and Adobe Reader 9 and Acrobat 9 before 9.1.2 allows remote attackers to execute arbitrary code via a crafted file that triggers memory corruption.
nvd