Adobe Acrobat vulnerabilities

1,356 known vulnerabilities affecting adobe/acrobat.

Total CVEs
1,356
CISA KEV
23
actively exploited
Public exploits
43
Exploited in wild
27
Severity breakdown
CRITICAL540HIGH476MEDIUM316LOW24

Vulnerabilities

Page 65 of 68
CVE-2009-3461CRITICALCVSS 9.3v9.0.0v9.1+3 more2009-10-19
CVE-2009-3461 [CRITICAL] CWE-264 CVE-2009-3461: Unspecified vulnerability in Adobe Acrobat 9.x before 9.2 allows attackers to bypass intended file-e Unspecified vulnerability in Adobe Acrobat 9.x before 9.2 allows attackers to bypass intended file-extension restrictions via unknown vectors.
nvd
CVE-2009-2990CRITICALCVSS 9.3PoC≤ 9.1.3v7.0+22 more2009-10-19
CVE-2009-2990 [CRITICAL] CWE-189 CVE-2009-2990: Array index error in Adobe Reader and Acrobat 9.x before 9.2, 8.x before 8.1.7, and possibly 7.x thr Array index error in Adobe Reader and Acrobat 9.x before 9.2, 8.x before 8.1.7, and possibly 7.x through 7.1.4 might allow attackers to execute arbitrary code via unspecified vectors.
nvd
CVE-2009-2980CRITICALCVSS 9.3≤ 9.1.3v7.0+22 more2009-10-19
CVE-2009-2980 [CRITICAL] CWE-189 CVE-2009-2980: Integer overflow in Adobe Reader and Acrobat 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2 Integer overflow in Adobe Reader and Acrobat 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2 allows attackers to cause a denial of service or possibly execute arbitrary code via unspecified vectors.
nvd
CVE-2009-3460CRITICALCVSS 9.3≤ 9.1.3v7.0+22 more2009-10-19
CVE-2009-3460 [CRITICAL] CWE-399 CVE-2009-3460: Adobe Acrobat 9.x before 9.2, 8.x before 8.1.7, and possibly 7.x through 7.1.4 allows attackers to c Adobe Acrobat 9.x before 9.2, 8.x before 8.1.7, and possibly 7.x through 7.1.4 allows attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via unspecified vectors.
nvd
CVE-2009-2986CRITICALCVSS 9.3≤ 9.1.3v7.0+22 more2009-10-19
CVE-2009-2986 [CRITICAL] CWE-119 CVE-2009-2986: Multiple heap-based buffer overflows in Adobe Reader and Acrobat 7.x before 7.1.4, 8.x before 8.1.7, Multiple heap-based buffer overflows in Adobe Reader and Acrobat 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2 might allow attackers to execute arbitrary code via unspecified vectors.
nvd
CVE-2009-2984CRITICALCVSS 9.3≤ 9.1.3v7.0+22 more2009-10-19
CVE-2009-2984 [CRITICAL] CVE-2009-2984: Unspecified vulnerability in the image decoder in Adobe Acrobat 9.x before 9.2, and possibly 7.x thr Unspecified vulnerability in the image decoder in Adobe Acrobat 9.x before 9.2, and possibly 7.x through 7.1.4 and 8.x through 8.1.7, allows attackers to cause a denial of service or possibly execute arbitrary code via unknown vectors.
nvd
CVE-2009-2993CRITICALCVSS 9.3≤ 9.1.3v7.0+22 more2009-10-19
CVE-2009-2993 [CRITICAL] CWE-20 CVE-2009-2993: The JavaScript for Acrobat API in Adobe Reader and Acrobat 7.x before 7.1.4, 8.x before 8.1.7, and 9 The JavaScript for Acrobat API in Adobe Reader and Acrobat 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2 does not properly implement the (1) Privileged Context and (2) Safe Path restrictions for unspecified JavaScript methods, which allows remote attackers to create arbitrary files, and possibly execute arbitrary code, via the cPath paramete
nvd
CVE-2009-2996CRITICALCVSS 9.3≤ 9.1.3v7.0+22 more2009-10-19
CVE-2009-2996 [CRITICAL] CVE-2009-2996: Adobe Reader and Acrobat 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2 allow attackers to c Adobe Reader and Acrobat 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2 allow attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2009-2985.
nvd
CVE-2009-2994CRITICALCVSS 9.3PoC≤ 9.1.3v7.0+22 more2009-10-19
CVE-2009-2994 [CRITICAL] CWE-119 CVE-2009-2994: Buffer overflow in Adobe Reader and Acrobat 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2 m Buffer overflow in Adobe Reader and Acrobat 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2 might allow attackers to execute arbitrary code via unspecified vectors.
nvd
CVE-2009-2991CRITICALCVSS 9.3≤ 9.1.3v7.0+22 more2009-10-19
CVE-2009-2991 [CRITICAL] CVE-2009-2991: Unspecified vulnerability in the Mozilla plug-in in Adobe Reader and Acrobat 8.x before 8.1.7, and p Unspecified vulnerability in the Mozilla plug-in in Adobe Reader and Acrobat 8.x before 8.1.7, and possibly 7.x before 7.1.4 and 9.x before 9.2, might allow remote attackers to execute arbitrary code via unknown vectors.
nvd
CVE-2009-2981CRITICALCVSS 9.3≤ 9.1.3v7.0+22 more2009-10-19
CVE-2009-2981 [CRITICAL] CWE-20 CVE-2009-2981: Adobe Reader and Acrobat 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2 do not properly vali Adobe Reader and Acrobat 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2 do not properly validate input, which might allow attackers to bypass intended Trust Manager restrictions via unspecified vectors.
nvd
CVE-2009-2989CRITICALCVSS 9.3≤ 9.1.3v7.0+22 more2009-10-19
CVE-2009-2989 [CRITICAL] CWE-189 CVE-2009-2989: Integer overflow in Adobe Acrobat 9.x before 9.2, 8.x before 8.1.7, and possibly 7.x through 7.1.4 m Integer overflow in Adobe Acrobat 9.x before 9.2, 8.x before 8.1.7, and possibly 7.x through 7.1.4 might allow attackers to execute arbitrary code via unspecified vectors.
nvd
CVE-2009-2985CRITICALCVSS 9.3≤ 9.1.3v7.0+22 more2009-10-19
CVE-2009-2985 [CRITICAL] CWE-399 CVE-2009-2985: Adobe Reader and Acrobat 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2 allow attackers to c Adobe Reader and Acrobat 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2 allow attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2009-2996.
nvd
CVE-2009-2997CRITICALCVSS 9.3≤ 9.1.3v7.0+22 more2009-10-19
CVE-2009-2997 [CRITICAL] CWE-119 CVE-2009-2997: Heap-based buffer overflow in Adobe Reader and Acrobat 7.x before 7.1.4, 8.x before 8.1.7, and 9.x b Heap-based buffer overflow in Adobe Reader and Acrobat 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2 might allow attackers to execute arbitrary code via unspecified vectors.
nvd
CVE-2009-2983CRITICALCVSS 9.3PoC≤ 9.1.3v7.0+22 more2009-10-19
CVE-2009-2983 [CRITICAL] CWE-399 CVE-2009-2983: Adobe Reader and Acrobat 9.x before 9.2, 8.x before 8.1.7, and possibly 7.x through 7.1.4 allow atta Adobe Reader and Acrobat 9.x before 9.2, 8.x before 8.1.7, and possibly 7.x through 7.1.4 allow attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via unspecified vectors.
nvd
CVE-2009-2998CRITICALCVSS 9.3v7.0v7.0.1+22 more2009-10-19
CVE-2009-2998 [CRITICAL] CWE-20 CVE-2009-2998: Adobe Reader and Acrobat 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2 do not properly vali Adobe Reader and Acrobat 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2 do not properly validate input, which might allow attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2009-3458.
nvd
CVE-2009-3458CRITICALCVSS 9.3≤ 9.1.3v7.0+22 more2009-10-19
CVE-2009-3458 [CRITICAL] CVE-2009-3458: Adobe Reader and Acrobat 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2 do not properly vali Adobe Reader and Acrobat 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2 do not properly validate input, which might allow attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2009-2998.
nvd
CVE-2009-2979MEDIUMCVSS 4.3≤ 9.1.3v7.0+22 more2009-10-19
CVE-2009-2979 [MEDIUM] CVE-2009-2979: Adobe Reader and Acrobat 9.x before 9.2, 8.x before 8.1.7, and possibly 7.x through 7.1.4 do not pro Adobe Reader and Acrobat 9.x before 9.2, 8.x before 8.1.7, and possibly 7.x through 7.1.4 do not properly perform XMP-XML entity expansion, which allows remote attackers to cause a denial of service via a crafted document.
nvd
CVE-2009-3462MEDIUMCVSS 5.1≤ 9.1.3v7.0+22 more2009-10-19
CVE-2009-3462 [MEDIUM] CVE-2009-3462: Adobe Reader and Acrobat 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2 on Unix, when Debug Adobe Reader and Acrobat 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2 on Unix, when Debug mode is enabled, allow attackers to execute arbitrary code via unspecified vectors, related to a "format bug."
nvd
CVE-2009-2987MEDIUMCVSS 4.3≤ 9.1.3v7.0+22 more2009-10-19
CVE-2009-2987 [MEDIUM] CVE-2009-2987: Unspecified vulnerability in an ActiveX control in Adobe Reader and Acrobat 7.x before 7.1.4, 8.x be Unspecified vulnerability in an ActiveX control in Adobe Reader and Acrobat 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2 on Windows allows remote attackers to cause a denial of service via unknown vectors.
nvd
← Previous65 / 68Next →