Adobe Acrobat vulnerabilities
1,413 known vulnerabilities affecting adobe/acrobat.
Total CVEs
1,413
CISA KEV
24
actively exploited
Public exploits
46
Exploited in wild
42
Severity breakdown
CRITICAL538HIGH516MEDIUM333LOW26
Vulnerabilities
Page 35 of 71
CVE-2016-7853P3CRITICALCVSS 9.8≤ 11.0.172016-10-21
CVE-2016-7853 [CRITICAL] CVE-2016-7853: Adobe Reader and Acrobat before 11.0.18, Acrobat and Acrobat Reader DC Classic before 15.006.30243,
Adobe Reader and Acrobat before 11.0.18, Acrobat and Acrobat Reader DC Classic before 15.006.30243, and Acrobat and Acrobat Reader DC Continuous before 15.020.20039 on Windows and OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-6940, CVE-2016-6941
nvd
CVE-2011-2437P3CRITICALCVSS 9.3v8.0v8.1+36 more2011-09-15
CVE-2011-2437 [CRITICAL] CVE-2011-2437: Heap-based buffer overflow in Adobe Reader and Acrobat 8.x before 8.3.1, 9.x before 9.4.6, and 10.x
Heap-based buffer overflow in Adobe Reader and Acrobat 8.x before 8.3.1, 9.x before 9.4.6, and 10.x before 10.1.1 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2011-2433 and CVE-2011-2434.
nvd
CVE-2011-2435P3CRITICALCVSS 9.3v8.0v8.1+36 more2011-09-15
CVE-2011-2435 [CRITICAL] CWE-119 CVE-2011-2435: Buffer overflow in Adobe Reader and Acrobat 8.x before 8.3.1, 9.x before 9.4.6, and 10.x before 10.1
Buffer overflow in Adobe Reader and Acrobat 8.x before 8.3.1, 9.x before 9.4.6, and 10.x before 10.1.1 allows attackers to execute arbitrary code via unspecified vectors.
nvd
CVE-2011-2433P3CRITICALCVSS 9.3v8.0v8.1+36 more2011-09-15
CVE-2011-2433 [CRITICAL] CWE-119 CVE-2011-2433: Heap-based buffer overflow in Adobe Reader and Acrobat 8.x before 8.3.1, 9.x before 9.4.6, and 10.x
Heap-based buffer overflow in Adobe Reader and Acrobat 8.x before 8.3.1, 9.x before 9.4.6, and 10.x before 10.1.1 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2011-2434 and CVE-2011-2437.
nvd
CVE-2011-2434P3CRITICALCVSS 9.3v8.0v8.1+36 more2011-09-15
CVE-2011-2434 [CRITICAL] CVE-2011-2434: Heap-based buffer overflow in Adobe Reader and Acrobat 8.x before 8.3.1, 9.x before 9.4.6, and 10.x
Heap-based buffer overflow in Adobe Reader and Acrobat 8.x before 8.3.1, 9.x before 9.4.6, and 10.x before 10.1.1 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2011-2433 and CVE-2011-2437.
nvd
CVE-2011-2432P3CRITICALCVSS 9.3v8.0v8.1+36 more2011-09-15
CVE-2011-2432 [CRITICAL] CWE-119 CVE-2011-2432: Buffer overflow in the U3D TIFF Resource in Adobe Reader and Acrobat 8.x before 8.3.1, 9.x before 9.
Buffer overflow in the U3D TIFF Resource in Adobe Reader and Acrobat 8.x before 8.3.1, 9.x before 9.4.6, and 10.x before 10.1.1 allows attackers to execute arbitrary code via unspecified vectors.
nvd
CVE-2024-20729P3HIGHCVSS 7.8≥ 20.001.30005, < 20.005.305742024-02-15
CVE-2024-20729 [HIGH] CWE-416 CVE-2024-20729: Acrobat Reader versions 20.005.30539, 23.008.20470 and earlier are affected by a Use After Free vuln
Acrobat Reader versions 20.005.30539, 23.008.20470 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
nvd
CVE-2017-16384P3HIGHCVSS 8.8≤ 11.0.22≥ 17.0, ≤ 17.011.300662017-12-09
CVE-2017-16384 [HIGH] CWE-125 CVE-2017-16384: An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.3
An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versions, and 11.0.22 and earlier versions. The vulnerability is caused by a buffer over-read in the exif processing module for a PNG file (during XPS conversion). Invalid input leads to a computatio
nvd
CVE-2024-41831P3HIGHCVSS 7.8≥ 20.001.30005, < 20.005.30655≥ 24.001.20604, < 24.001.301592024-08-14
CVE-2024-41831 [HIGH] CWE-416 CVE-2024-41831: Acrobat Reader versions 20.005.30636, 24.002.20965, 24.002.20964, 24.001.30123 and earlier are affec
Acrobat Reader versions 20.005.30636, 24.002.20965, 24.002.20964, 24.001.30123 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
nvd
CVE-2017-11229P3HIGHCVSS 8.8≥ 11.0.0, ≤ 11.0.20≥ 17.011.00000, ≤ 17.011.300662017-08-11
CVE-2017-11229 [HIGH] CVE-2017-11229: Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earl
Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has a security bypass vulnerability when manipulating Forms Data Format (FDF).
nvd
CVE-2016-4088P3CRITICALCVSS 9.8≤ 11.0.152016-05-11
CVE-2016-4088 [CRITICAL] CVE-2016-4088: Adobe Reader and Acrobat before 11.0.16, Acrobat and Acrobat Reader DC Classic before 15.006.30172,
Adobe Reader and Acrobat before 11.0.16, Acrobat and Acrobat Reader DC Classic before 15.006.30172, and Acrobat and Acrobat Reader DC Continuous before 15.016.20039 on Windows and OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-1037, CVE-2016-1063
nvd
CVE-2016-4097P3CRITICALCVSS 9.8≤ 11.0.152016-05-11
CVE-2016-4097 [CRITICAL] CVE-2016-4097: Adobe Reader and Acrobat before 11.0.16, Acrobat and Acrobat Reader DC Classic before 15.006.30172,
Adobe Reader and Acrobat before 11.0.16, Acrobat and Acrobat Reader DC Classic before 15.006.30172, and Acrobat and Acrobat Reader DC Continuous before 15.016.20039 on Windows and OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-1037, CVE-2016-1063
nvd
CVE-2016-4100P3CRITICALCVSS 9.8≤ 11.0.152016-05-11
CVE-2016-4100 [CRITICAL] CVE-2016-4100: Adobe Reader and Acrobat before 11.0.16, Acrobat and Acrobat Reader DC Classic before 15.006.30172,
Adobe Reader and Acrobat before 11.0.16, Acrobat and Acrobat Reader DC Classic before 15.006.30172, and Acrobat and Acrobat Reader DC Continuous before 15.016.20039 on Windows and OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-1037, CVE-2016-1063
nvd
CVE-2016-4094P3CRITICALCVSS 9.8≤ 11.0.152016-05-11
CVE-2016-4094 [CRITICAL] CVE-2016-4094: Adobe Reader and Acrobat before 11.0.16, Acrobat and Acrobat Reader DC Classic before 15.006.30172,
Adobe Reader and Acrobat before 11.0.16, Acrobat and Acrobat Reader DC Classic before 15.006.30172, and Acrobat and Acrobat Reader DC Continuous before 15.016.20039 on Windows and OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-1037, CVE-2016-1063
nvd
CVE-2016-4098P3CRITICALCVSS 9.8≤ 11.0.152016-05-11
CVE-2016-4098 [CRITICAL] CVE-2016-4098: Adobe Reader and Acrobat before 11.0.16, Acrobat and Acrobat Reader DC Classic before 15.006.30172,
Adobe Reader and Acrobat before 11.0.16, Acrobat and Acrobat Reader DC Classic before 15.006.30172, and Acrobat and Acrobat Reader DC Continuous before 15.016.20039 on Windows and OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-1037, CVE-2016-1063
nvd
CVE-2016-4101P3CRITICALCVSS 9.8≤ 11.0.152016-05-11
CVE-2016-4101 [CRITICAL] CVE-2016-4101: Adobe Reader and Acrobat before 11.0.16, Acrobat and Acrobat Reader DC Classic before 15.006.30172,
Adobe Reader and Acrobat before 11.0.16, Acrobat and Acrobat Reader DC Classic before 15.006.30172, and Acrobat and Acrobat Reader DC Continuous before 15.016.20039 on Windows and OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-1037, CVE-2016-1063
nvd
CVE-2016-4090P3CRITICALCVSS 9.8≤ 11.0.152016-05-11
CVE-2016-4090 [CRITICAL] CVE-2016-4090: Adobe Reader and Acrobat before 11.0.16, Acrobat and Acrobat Reader DC Classic before 15.006.30172,
Adobe Reader and Acrobat before 11.0.16, Acrobat and Acrobat Reader DC Classic before 15.006.30172, and Acrobat and Acrobat Reader DC Continuous before 15.016.20039 on Windows and OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-1037, CVE-2016-1063
nvd
CVE-2016-4104P3CRITICALCVSS 9.8≤ 11.0.152016-05-11
CVE-2016-4104 [CRITICAL] CVE-2016-4104: Adobe Reader and Acrobat before 11.0.16, Acrobat and Acrobat Reader DC Classic before 15.006.30172,
Adobe Reader and Acrobat before 11.0.16, Acrobat and Acrobat Reader DC Classic before 15.006.30172, and Acrobat and Acrobat Reader DC Continuous before 15.016.20039 on Windows and OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-1037, CVE-2016-1063
nvd
CVE-2016-4105P3CRITICALCVSS 9.8≤ 11.0.152016-05-11
CVE-2016-4105 [CRITICAL] CVE-2016-4105: Adobe Reader and Acrobat before 11.0.16, Acrobat and Acrobat Reader DC Classic before 15.006.30172,
Adobe Reader and Acrobat before 11.0.16, Acrobat and Acrobat Reader DC Classic before 15.006.30172, and Acrobat and Acrobat Reader DC Continuous before 15.016.20039 on Windows and OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-1037, CVE-2016-1063
nvd
CVE-2016-4099P3CRITICALCVSS 9.8≤ 11.0.152016-05-11
CVE-2016-4099 [CRITICAL] CVE-2016-4099: Adobe Reader and Acrobat before 11.0.16, Acrobat and Acrobat Reader DC Classic before 15.006.30172,
Adobe Reader and Acrobat before 11.0.16, Acrobat and Acrobat Reader DC Classic before 15.006.30172, and Acrobat and Acrobat Reader DC Continuous before 15.016.20039 on Windows and OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-1037, CVE-2016-1063
nvd