Adobe Acrobat vulnerabilities
1,356 known vulnerabilities affecting adobe/acrobat.
Total CVEs
1,356
CISA KEV
23
actively exploited
Public exploits
43
Exploited in wild
27
Severity breakdown
CRITICAL540HIGH476MEDIUM316LOW24
Vulnerabilities
Page 18 of 68
CVE-2021-39858LOWCVSS 3.3≥ 20.001.30005, ≤ 20.004.300062021-09-29
CVE-2021-39858 [LOW] CWE-125 CVE-2021-39858: Acrobat Reader DC versions 2021.005.20060 (and earlier), 2020.004.30006 (and earlier) and 2017.011.3
Acrobat Reader DC versions 2021.005.20060 (and earlier), 2020.004.30006 (and earlier) and 2017.011.30199 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of arbitrary memory information in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a mal
nvd
CVE-2021-28564HIGHCVSS 8.8≥ 17.011.30059, ≤ 17.011.30194≥ 20.001.30005, ≤ 20.001.300202021-09-02
CVE-2021-28564 [HIGH] CWE-787 CVE-2021-28564: Acrobat Reader DC versions versions 2021.001.20150 (and earlier), 2020.001.30020 (and earlier) and 2
Acrobat Reader DC versions versions 2021.001.20150 (and earlier), 2020.001.30020 (and earlier) and 2017.011.30194 (and earlier) are affected by an Out-of-bounds Write vulnerability within the ImageTool component. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploi
nvd
CVE-2021-21086HIGHCVSS 7.8≥ 17.011.30056, ≤ 17.011.30188≥ 20.001.30005, ≤ 20.001.300182021-09-02
CVE-2021-21086 [HIGH] CWE-787 CVE-2021-21086: Acrobat Reader DC versions versions 2020.013.20074 (and earlier), 2020.001.30018 (and earlier) and 2
Acrobat Reader DC versions versions 2020.013.20074 (and earlier), 2020.001.30018 (and earlier) and 2017.011.30188 (and earlier) are affected by an Out-of-bounds Write vulnerability in the CoolType library. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation
nvd
CVE-2021-28560HIGHCVSS 8.8≥ 17.011.30059, ≤ 17.011.30194≥ 20.001.30005, ≤ 20.001.300202021-09-02
CVE-2021-28560 [HIGH] CWE-122 CVE-2021-28560: Acrobat Reader DC versions versions 2021.001.20150 (and earlier), 2020.001.30020 (and earlier) and 2
Acrobat Reader DC versions versions 2021.001.20150 (and earlier), 2020.001.30020 (and earlier) and 2017.011.30194 (and earlier) are affected by a Heap-based Buffer Overflow vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requ
nvd
CVE-2021-28565HIGHCVSS 8.8≥ 17.011.30059, ≤ 17.011.30194≥ 20.001.30005, ≤ 20.001.300202021-09-02
CVE-2021-28565 [HIGH] CWE-125 CVE-2021-28565: Acrobat Reader DC versions versions 2021.001.20150 (and earlier), 2020.001.30020 (and earlier) and 2
Acrobat Reader DC versions versions 2021.001.20150 (and earlier), 2020.001.30020 (and earlier) and 2017.011.30194 (and earlier) are affected by an Out-of-bounds Read vulnerability in the PDFLibTool component. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitati
nvd
CVE-2021-28550HIGHCVSS 8.8KEV≥ 17.011.30059, ≤ 17.011.30194≥ 20.001.30005, ≤ 20.001.300202021-09-02
CVE-2021-28550 [HIGH] CWE-416 CVE-2021-28550: Acrobat Reader DC versions versions 2021.001.20150 (and earlier), 2020.001.30020 (and earlier) and 2
Acrobat Reader DC versions versions 2021.001.20150 (and earlier), 2020.001.30020 (and earlier) and 2017.011.30194 (and earlier) are affected by a Use After Free vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires user in
nvd
CVE-2021-28553HIGHCVSS 8.8≥ 17.011.30059, ≤ 17.011.30194≥ 20.001.30005, ≤ 20.001.300202021-09-02
CVE-2021-28553 [HIGH] CWE-416 CVE-2021-28553: Acrobat Reader DC versions versions 2021.001.20150 (and earlier), 2020.001.30020 (and earlier) and 2
Acrobat Reader DC versions versions 2021.001.20150 (and earlier), 2020.001.30020 (and earlier) and 2017.011.30194 (and earlier) are affected by an Use After Free vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires user i
nvd
CVE-2021-28561HIGHCVSS 8.8≥ 17.011.30059, ≤ 17.011.30194≥ 20.001.30005, ≤ 20.001.300202021-09-02
CVE-2021-28561 [HIGH] CWE-787 CVE-2021-28561: Acrobat Reader DC versions versions 2021.001.20150 (and earlier), 2020.001.30020 (and earlier) and 2
Acrobat Reader DC versions versions 2021.001.20150 (and earlier), 2020.001.30020 (and earlier) and 2017.011.30194 (and earlier) are affected by a memory corruption vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires user
nvd
CVE-2021-28558HIGHCVSS 8.8≥ 17.011.30059, ≤ 17.011.30194≥ 20.001.30005, ≤ 20.001.300202021-09-02
CVE-2021-28558 [HIGH] CWE-122 CVE-2021-28558: Acrobat Reader DC versions versions 2021.001.20150 (and earlier), 2020.001.30020 (and earlier) and 2
Acrobat Reader DC versions versions 2021.001.20150 (and earlier), 2020.001.30020 (and earlier) and 2017.011.30194 (and earlier) are affected by an Heap-based buffer overflow vulnerability in the PDFLibTool component. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Ex
nvd
CVE-2021-28559MEDIUMCVSS 5.3≥ 17.011.30059, ≤ 17.011.30194≥ 20.001.30005, ≤ 20.001.300202021-09-02
CVE-2021-28559 [MEDIUM] CWE-359 CVE-2021-28559: Acrobat Reader DC versions versions 2021.001.20150 (and earlier), 2020.001.30020 (and earlier) and 2
Acrobat Reader DC versions versions 2021.001.20150 (and earlier), 2020.001.30020 (and earlier) and 2017.011.30194 (and earlier) are affected by an Information Exposure vulnerability. An unauthenticated attacker could leverage this vulnerability to get access to restricted data stored within global variables and objects.
nvd
CVE-2021-28555MEDIUMCVSS 6.5≥ 17.011.30059, ≤ 17.011.30194≥ 20.001.30005, ≤ 20.001.300202021-09-02
CVE-2021-28555 [MEDIUM] CWE-125 CVE-2021-28555: Acrobat Reader DC versions versions 2021.001.20150 (and earlier), 2020.001.30020 (and earlier) and 2
Acrobat Reader DC versions versions 2021.001.20150 (and earlier), 2020.001.30020 (and earlier) and 2017.011.30194 (and earlier) are affected by an Out-of-bounds Read vulnerability. An unauthenticated attacker could leverage this vulnerability to get access to sensitive information in the context of the current user. Exploitation of this issue requir
nvd
CVE-2021-28557MEDIUMCVSS 4.3≥ 17.011.30059, ≤ 17.011.30194≥ 20.001.30005, ≤ 20.001.300202021-09-02
CVE-2021-28557 [MEDIUM] CWE-125 CVE-2021-28557: Acrobat Reader DC versions versions 2021.001.20150 (and earlier), 2020.001.30020 (and earlier) and 2
Acrobat Reader DC versions versions 2021.001.20150 (and earlier), 2020.001.30020 (and earlier) and 2017.011.30194 (and earlier) are affected by an Out-of-bounds Read vulnerability. An unauthenticated attacker could leverage this vulnerability to leak sensitive system information in the context of the current user. Exploitation of this issue requires
nvd
CVE-2021-28551HIGHCVSS 7.8≥ 17.011.30180, ≤ 17.011.30194≥ 20.001.30005, ≤ 20.001.300202021-08-24
CVE-2021-28551 [HIGH] CWE-125 CVE-2021-28551: Acrobat Reader DC versions versions 2021.001.20155 (and earlier), 2020.001.30025 (and earlier) and 2
Acrobat Reader DC versions versions 2021.001.20155 (and earlier), 2020.001.30025 (and earlier) and 2017.011.30196 (and earlier) are affected by an Out-of-bounds read vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires us
nvd
CVE-2021-28552HIGHCVSS 7.8≥ 17.011.30180, ≤ 17.011.30196≥ 20.001.30005, ≤ 20.001.300252021-08-24
CVE-2021-28552 [HIGH] CWE-416 CVE-2021-28552: Acrobat Reader DC versions versions 2021.001.20155 (and earlier), 2020.001.30025 (and earlier) and 2
Acrobat Reader DC versions versions 2021.001.20155 (and earlier), 2020.001.30025 (and earlier) and 2017.011.30196 (and earlier) are affected by an Use After Free vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires user i
nvd
CVE-2021-28631HIGHCVSS 7.8≥ 17.011.30180, ≤ 17.011.30196≥ 20.001.30005, ≤ 20.001.300252021-08-24
CVE-2021-28631 [HIGH] CWE-416 CVE-2021-28631: Acrobat Reader DC versions versions 2021.001.20155 (and earlier), 2020.001.30025 (and earlier) and 2
Acrobat Reader DC versions versions 2021.001.20155 (and earlier), 2020.001.30025 (and earlier) and 2017.011.30196 (and earlier) are affected by an Use After Free vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires user i
nvd
CVE-2021-28554HIGHCVSS 7.8≥ 17.011.30180, ≤ 17.011.30196≥ 20.001.30005, ≤ 20.001.300252021-08-24
CVE-2021-28554 [HIGH] CWE-125 CVE-2021-28554: Acrobat Reader DC versions versions 2021.001.20155 (and earlier), 2020.001.30025 (and earlier) and 2
Acrobat Reader DC versions versions 2021.001.20155 (and earlier), 2020.001.30025 (and earlier) and 2017.011.30196 (and earlier) are affected by an Out-of-bounds Read vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires us
nvd
CVE-2021-28632HIGHCVSS 7.8≥ 17.011.30180, ≤ 17.011.30196≥ 20.001.30005, ≤ 20.001.300252021-08-24
CVE-2021-28632 [HIGH] CWE-416 CVE-2021-28632: Acrobat Reader DC versions versions 2021.001.20155 (and earlier), 2020.001.30025 (and earlier) and 2
Acrobat Reader DC versions versions 2021.001.20155 (and earlier), 2020.001.30025 (and earlier) and 2017.011.30196 (and earlier) are affected by an Use After Free vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires user i
nvd
CVE-2021-28545HIGHCVSS 8.1≥ 17.011.30059, ≤ 17.011.30188≥ 20.001.30005, ≤ 20.001.300182021-04-01
CVE-2021-28545 [HIGH] CWE-353 CVE-2021-28545: Acrobat Reader DC versions versions 2020.013.20074 (and earlier), 2020.001.30018 (and earlier) and 2
Acrobat Reader DC versions versions 2020.013.20074 (and earlier), 2020.001.30018 (and earlier) and 2017.011.30188 (and earlier) are missing support for an integrity check. An unauthenticated attacker would have the ability to completely manipulate data in a certified PDF without invalidating the original certification. Exploitation of this issue requi
nvd
CVE-2021-28546MEDIUMCVSS 6.5≥ 17.011.30059, ≤ 17.011.30188≥ 20.001.30005, ≤ 20.001.300182021-04-01
CVE-2021-28546 [MEDIUM] CWE-353 CVE-2021-28546: Acrobat Reader DC versions versions 2020.013.20074 (and earlier), 2020.001.30018 (and earlier) and 2
Acrobat Reader DC versions versions 2020.013.20074 (and earlier), 2020.001.30018 (and earlier) and 2017.011.30188 (and earlier) are missing support for an integrity check. An unauthenticated attacker could leverage this vulnerability to modify content in a certified PDF without invalidating the certification. Exploitation of this issue requires user
nvd
CVE-2020-29075MEDIUMCVSS 6.5≥ 17.011.30059, ≤ 17.011.30180≥ 20.001.30005, ≤ 20.001.300102021-02-23
CVE-2020-29075 [MEDIUM] CWE-20 CVE-2020-29075: Acrobat Reader DC versions 2020.013.20066 (and earlier), 2020.001.30010 (and earlier) and 2017.011.3
Acrobat Reader DC versions 2020.013.20066 (and earlier), 2020.001.30010 (and earlier) and 2017.011.30180 (and earlier) are affected by an information exposure vulnerability, that could enable an attacker to get a DNS interaction and track if the user has opened or closed a PDF file when loaded from the filesystem without a prompt. User interaction is
nvd