cbcvebase.

Adobe Acrobat Dc vulnerabilities

1,798 known vulnerabilities affecting adobe/acrobat_dc.

Total CVEs
1,798
CISA KEV
7
actively exploited
Public exploits
30
Exploited in wild
15
Severity breakdown
CRITICAL449HIGH859MEDIUM456LOW34

Vulnerabilities

Page 41 of 90
CVE-2024-39424P3HIGHCVSS 7.8≥ 15.008.20082, < 24.002.210052024-08-14
CVE-2024-39424 [HIGH] CWE-416 CVE-2024-39424: Acrobat Reader versions 20.005.30636, 24.002.20965, 24.002.20964, 24.001.30123 and earlier are affec Acrobat Reader versions 20.005.30636, 24.002.20965, 24.002.20964, 24.001.30123 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
nvd
CVE-2024-39422P3HIGHCVSS 7.8≥ 15.008.20082, < 24.002.210052024-08-14
CVE-2024-39422 [HIGH] CWE-416 CVE-2024-39422: Acrobat Reader versions 20.005.30636, 24.002.20965, 24.002.20964, 24.001.30123 and earlier are affec Acrobat Reader versions 20.005.30636, 24.002.20965, 24.002.20964, 24.001.30123 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
nvd
CVE-2024-39383P3HIGHCVSS 7.8≥ 24.002.20964, < 24.002.210052024-08-14
CVE-2024-39383 [HIGH] CWE-416 CVE-2024-39383: Acrobat Reader versions 20.005.30636, 24.002.20965, 24.002.20964, 24.001.30123 and earlier are affec Acrobat Reader versions 20.005.30636, 24.002.20965, 24.002.20964, 24.001.30123 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
nvd
CVE-2019-16444P3CRITICALCVSS 9.8≥ 15.006.30060, < 15.006.30508≥ 15.008.20082, < 19.021.20058+1 more2019-12-19
CVE-2019-16444 [CRITICAL] CVE-2019-16444: Adobe Acrobat and Reader versions , 2019.021.20056 and earlier, 2017.011.30152 and earlier, 2017.011 Adobe Acrobat and Reader versions , 2019.021.20056 and earlier, 2017.011.30152 and earlier, 2017.011.30155 and earlier version, 2017.011.30152 and earlier, and 2015.006.30505 and earlier have a binary planting (default folder privilege escalation) vulnerability. Successful exploitation could lead to privilege escalation.
nvd
CVE-2024-20727P3HIGHCVSS 7.8≥ 15.008.20082, < 23.008.205332024-02-15
CVE-2024-20727 [HIGH] CWE-787 CVE-2024-20727: Acrobat Reader versions 20.005.30539, 23.008.20470 and earlier are affected by an out-of-bounds writ Acrobat Reader versions 20.005.30539, 23.008.20470 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
nvd
CVE-2023-44366P3HIGHCVSS 7.8≥ 15.008.20082, < 23.006.203802023-11-16
CVE-2023-44366 [HIGH] CWE-787 CVE-2023-44366: Adobe Acrobat Reader versions 23.006.20360 (and earlier) and 20.005.30524 (and earlier) are affected Adobe Acrobat Reader versions 23.006.20360 (and earlier) and 20.005.30524 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
nvd
CVE-2016-0938P3HIGHCVSS 8.8≤ 15.006.30097≤ 15.009.200772016-01-14
CVE-2016-0938 [HIGH] CVE-2016-0938: The AcroForm plugin in Adobe Reader and Acrobat before 11.0.14, Acrobat and Acrobat Reader DC Classi The AcroForm plugin in Adobe Reader and Acrobat before 11.0.14, Acrobat and Acrobat Reader DC Classic before 15.006.30119, and Acrobat and Acrobat Reader DC Continuous before 15.010.20056 on Windows and OS X allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-201
nvd
CVE-2018-4903P3MEDIUMCVSS 6.5≥ -, ≤ 18.009.20050≥ 15.0, ≤ 15.006.303942018-02-27
CVE-2018-4903 [MEDIUM] CWE-125 CVE-2018-4903: An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 and earlier versions. This vulnerability occurs as a result of computation that reads data that is past the end of the target buffer; the computation is part of the TIFF processing within the XPS module. A successful
nvd
CVE-2016-4197P3HIGHCVSS 8.8≤ 15.006.30174≤ 15.016.200452016-07-13
CVE-2016-4197 [HIGH] CVE-2016-4197: Adobe Reader and Acrobat before 11.0.17, Acrobat and Acrobat Reader DC Classic before 15.006.30198, Adobe Reader and Acrobat before 11.0.17, Acrobat and Acrobat Reader DC Classic before 15.006.30198, and Acrobat and Acrobat Reader DC Continuous before 15.017.20050 on Windows and OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4191, CVE-2016-4192, CV
nvd
CVE-2016-4199P3HIGHCVSS 8.8≤ 15.006.30174≤ 15.016.200452016-07-13
CVE-2016-4199 [HIGH] CVE-2016-4199: Adobe Reader and Acrobat before 11.0.17, Acrobat and Acrobat Reader DC Classic before 15.006.30198, Adobe Reader and Acrobat before 11.0.17, Acrobat and Acrobat Reader DC Classic before 15.006.30198, and Acrobat and Acrobat Reader DC Continuous before 15.017.20050 on Windows and OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4191, CVE-2016-4192, CV
nvd
CVE-2016-4200P3HIGHCVSS 8.8≤ 15.006.30174≤ 15.016.200452016-07-13
CVE-2016-4200 [HIGH] CVE-2016-4200: Adobe Reader and Acrobat before 11.0.17, Acrobat and Acrobat Reader DC Classic before 15.006.30198, Adobe Reader and Acrobat before 11.0.17, Acrobat and Acrobat Reader DC Classic before 15.006.30198, and Acrobat and Acrobat Reader DC Continuous before 15.017.20050 on Windows and OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4191, CVE-2016-4192, CV
nvd
CVE-2016-4196P3HIGHCVSS 8.8≤ 15.006.30174≤ 15.016.200452016-07-13
CVE-2016-4196 [HIGH] CVE-2016-4196: Adobe Reader and Acrobat before 11.0.17, Acrobat and Acrobat Reader DC Classic before 15.006.30198, Adobe Reader and Acrobat before 11.0.17, Acrobat and Acrobat Reader DC Classic before 15.006.30198, and Acrobat and Acrobat Reader DC Continuous before 15.017.20050 on Windows and OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4191, CVE-2016-4192, CV
nvd
CVE-2016-4198P3HIGHCVSS 8.8≤ 15.006.30174≤ 15.016.200452016-07-13
CVE-2016-4198 [HIGH] CVE-2016-4198: Adobe Reader and Acrobat before 11.0.17, Acrobat and Acrobat Reader DC Classic before 15.006.30198, Adobe Reader and Acrobat before 11.0.17, Acrobat and Acrobat Reader DC Classic before 15.006.30198, and Acrobat and Acrobat Reader DC Continuous before 15.017.20050 on Windows and OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4191, CVE-2016-4192, CV
nvd
CVE-2016-4202P3HIGHCVSS 8.8≤ 15.006.30174≤ 15.016.200452016-07-13
CVE-2016-4202 [HIGH] CVE-2016-4202: Adobe Reader and Acrobat before 11.0.17, Acrobat and Acrobat Reader DC Classic before 15.006.30198, Adobe Reader and Acrobat before 11.0.17, Acrobat and Acrobat Reader DC Classic before 15.006.30198, and Acrobat and Acrobat Reader DC Continuous before 15.017.20050 on Windows and OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4191, CVE-2016-4192, CV
nvd
CVE-2016-4195P3HIGHCVSS 8.8≤ 15.006.30174≤ 15.016.200452016-07-13
CVE-2016-4195 [HIGH] CVE-2016-4195: Adobe Reader and Acrobat before 11.0.17, Acrobat and Acrobat Reader DC Classic before 15.006.30198, Adobe Reader and Acrobat before 11.0.17, Acrobat and Acrobat Reader DC Classic before 15.006.30198, and Acrobat and Acrobat Reader DC Continuous before 15.017.20050 on Windows and OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4191, CVE-2016-4192, CV
nvd
CVE-2015-4445P3CRITICALCVSS 10.0≥ 15.006.30033, < 15.006.30060≥ 15.007.20033, < 15.008.200822015-07-15
CVE-2015-4445 [CRITICAL] CVE-2015-4445: Adobe Reader and Acrobat 10.x before 10.1.15 and 11.x before 11.0.12, Acrobat and Acrobat Reader DC Adobe Reader and Acrobat 10.x before 10.1.15 and 11.x before 11.0.12, Acrobat and Acrobat Reader DC Classic before 2015.006.30060, and Acrobat and Acrobat Reader DC Continuous before 2015.008.20082 on Windows and OS X allow attackers to bypass JavaScript API execution restrictions via unspecified vectors, a different vulnerability than CVE-2015-4435, CVE-201
nvd
CVE-2015-4435P3CRITICALCVSS 10.0≥ 15.006.30033, < 15.006.30060≥ 15.007.20033, < 15.008.200822015-07-15
CVE-2015-4435 [CRITICAL] CVE-2015-4435: Adobe Reader and Acrobat 10.x before 10.1.15 and 11.x before 11.0.12, Acrobat and Acrobat Reader DC Adobe Reader and Acrobat 10.x before 10.1.15 and 11.x before 11.0.12, Acrobat and Acrobat Reader DC Classic before 2015.006.30060, and Acrobat and Acrobat Reader DC Continuous before 2015.008.20082 on Windows and OS X allow attackers to bypass JavaScript API execution restrictions via unspecified vectors, a different vulnerability than CVE-2015-4438, CVE-201
nvd
CVE-2015-4438P3CRITICALCVSS 10.0≥ 15.006.30033, < 15.006.30060≥ 15.007.20033, < 15.008.200822015-07-15
CVE-2015-4438 [CRITICAL] CVE-2015-4438: Adobe Reader and Acrobat 10.x before 10.1.15 and 11.x before 11.0.12, Acrobat and Acrobat Reader DC Adobe Reader and Acrobat 10.x before 10.1.15 and 11.x before 11.0.12, Acrobat and Acrobat Reader DC Classic before 2015.006.30060, and Acrobat and Acrobat Reader DC Continuous before 2015.008.20082 on Windows and OS X allow attackers to bypass JavaScript API execution restrictions via unspecified vectors, a different vulnerability than CVE-2015-4435, CVE-201
nvd
CVE-2019-8174P3HIGHCVSS 8.8≥ 15.006.30060, < 15.006.30504≥ 15.008.20082, < 19.021.20047+1 more2019-10-17
CVE-2019-8174 [HIGH] CWE-119 CVE-2019-8174: Adobe Acrobat and Reader versions , 2019.012.20040 and earlier, 2017.011.30148 and earlier, 2017.011 Adobe Acrobat and Reader versions , 2019.012.20040 and earlier, 2017.011.30148 and earlier, 2017.011.30148 and earlier, 2015.006.30503 and earlier, and 2015.006.30503 and earlier have an untrusted pointer dereference vulnerability. Successful exploitation could lead to arbitrary code execution .
nvd
CVE-2015-6698P3MEDIUMCVSS 6.8≥ 15.006.30060, < 15.006.30094≥ 15.008.20082, < 15.009.200692015-10-14
CVE-2015-6698 [MEDIUM] CVE-2015-6698: Heap-based buffer overflow in the AcroForm implementation in Adobe Reader and Acrobat 10.x before 10 Heap-based buffer overflow in the AcroForm implementation in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2015.006.30094, and Acrobat and Acrobat Reader DC Continuous before 2015.009.20069 on Windows and OS X allows attackers to execute arbitrary code via unspecified vectors, a different vu
nvd
Adobe Acrobat Dc vulnerabilities | cvebase