Adobe Acrobat Dc vulnerabilities
1,838 known vulnerabilities affecting adobe/acrobat_dc.
Total CVEs
1,838
CISA KEV
7
actively exploited
Public exploits
30
Exploited in wild
15
Severity breakdown
CRITICAL449HIGH885MEDIUM470LOW34
Vulnerabilities
Page 76 of 92
CVE-2018-12839P4MEDIUMCVSS 5.5≥ 15.006.30060, ≤ 15.006.30452≥ 15.008.20082, ≤ 18.011.20063+1 more2018-10-12
CVE-2018-12839 [MEDIUM] CWE-125 CVE-2018-12839: Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.0
Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.
nvd
CVE-2018-12859P4MEDIUMCVSS 5.5≥ 15.006.30060, ≤ 15.006.30452≥ 15.008.20082, ≤ 18.011.20063+1 more2018-10-12
CVE-2018-12859 [MEDIUM] CWE-125 CVE-2018-12859: Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.0
Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.
nvd
CVE-2018-12869P4MEDIUMCVSS 5.5≥ 15.006.30060, ≤ 15.006.30452≥ 15.008.20082, ≤ 18.011.20063+1 more2018-10-12
CVE-2018-12869 [MEDIUM] CWE-125 CVE-2018-12869: Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.0
Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.
nvd
CVE-2018-12872P4MEDIUMCVSS 5.5≥ 15.006.30060, ≤ 15.006.30452≥ 15.008.20082, ≤ 18.011.20063+1 more2018-10-12
CVE-2018-12872 [MEDIUM] CWE-125 CVE-2018-12872: Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.0
Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.
nvd
CVE-2018-12867P4MEDIUMCVSS 5.5≥ 15.006.30060, ≤ 15.006.30452≥ 15.008.20082, ≤ 18.011.20063+1 more2018-10-12
CVE-2018-12867 [MEDIUM] CWE-125 CVE-2018-12867: Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.0
Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.
nvd
CVE-2018-12870P4MEDIUMCVSS 5.5≥ 15.006.30060, ≤ 15.006.30452≥ 15.008.20082, ≤ 18.011.20063+1 more2018-10-12
CVE-2018-12870 [MEDIUM] CWE-125 CVE-2018-12870: Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.0
Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.
nvd
CVE-2018-12871P4MEDIUMCVSS 5.5≥ 15.006.30060, ≤ 15.006.30452≥ 15.008.20082, ≤ 18.011.20063+1 more2018-10-12
CVE-2018-12871 [MEDIUM] CWE-125 CVE-2018-12871: Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.0
Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.
nvd
CVE-2018-16009P4MEDIUMCVSS 6.5≥ 15.006.30060, ≤ 15.006.30457≥ 15.008.20082, ≤ 19.008.20081+4 more2019-01-18
CVE-2018-16009 [MEDIUM] CWE-190 CVE-2018-16009: Adobe Acrobat and Reader versions 2019.008.20081 and earlier, 2019.008.20080 and earlier, 2019.008.2
Adobe Acrobat and Reader versions 2019.008.20081 and earlier, 2019.008.20080 and earlier, 2019.008.20081 and earlier, 2017.011.30106 and earlier version, 2017.011.30105 and earlier version, 2015.006.30457 and earlier, and 2015.006.30456 and earlier have an integer overflow vulnerability. Successful exploitation could lead to information disclosure.
nvd
CVE-2018-16007P4MEDIUMCVSS 6.5≥ 15.006.30060, ≤ 15.006.30457≥ 15.008.20082, ≤ 19.008.20081+4 more2019-01-18
CVE-2018-16007 [MEDIUM] CWE-190 CVE-2018-16007: Adobe Acrobat and Reader versions 2019.008.20081 and earlier, 2019.008.20080 and earlier, 2019.008.2
Adobe Acrobat and Reader versions 2019.008.20081 and earlier, 2019.008.20080 and earlier, 2019.008.20081 and earlier, 2017.011.30106 and earlier version, 2017.011.30105 and earlier version, 2015.006.30457 and earlier, and 2015.006.30456 and earlier have an integer overflow vulnerability. Successful exploitation could lead to information disclosure.
nvd
CVE-2018-15995P4MEDIUMCVSS 6.5≥ 15.006.30060, ≤ 15.006.30457≥ 15.008.20082, ≤ 19.008.20081+4 more2019-01-18
CVE-2018-15995 [MEDIUM] CWE-190 CVE-2018-15995: Adobe Acrobat and Reader versions 2019.008.20081 and earlier, 2019.008.20080 and earlier, 2019.008.2
Adobe Acrobat and Reader versions 2019.008.20081 and earlier, 2019.008.20080 and earlier, 2019.008.20081 and earlier, 2017.011.30106 and earlier version, 2017.011.30105 and earlier version, 2015.006.30457 and earlier, and 2015.006.30456 and earlier have an integer overflow vulnerability. Successful exploitation could lead to information disclosure.
nvd
CVE-2018-4972P4MEDIUMCVSS 6.5≥ 15.006.30060, ≤ 15.006.30417≥ 15.008.20082, ≤ 18.011.20038+1 more2018-07-09
CVE-2018-4972 [MEDIUM] CWE-125 CVE-2018-4972: Adobe Acrobat and Reader versions 2018.011.20038 and earlier, 2017.011.30079 and earlier, and 2015.0
Adobe Acrobat and Reader versions 2018.011.20038 and earlier, 2017.011.30079 and earlier, and 2015.006.30417 and earlier have an Out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.
nvd
CVE-2018-4951P4MEDIUMCVSS 6.5≥ 15.006.30060, ≤ 15.006.30417≥ 15.008.20082, ≤ 18.011.20038+1 more2018-07-09
CVE-2018-4951 [MEDIUM] CWE-125 CVE-2018-4951: Adobe Acrobat and Reader versions 2018.011.20038 and earlier, 2017.011.30079 and earlier, and 2015.0
Adobe Acrobat and Reader versions 2018.011.20038 and earlier, 2017.011.30079 and earlier, and 2015.006.30417 and earlier have an Out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.
nvd
CVE-2021-39856P4MEDIUMCVSS 6.5≥ 15.008.20082, ≤ 21.005.20058≥ 15.008.20082, ≤ 21.005.200602021-09-29
CVE-2021-39856 [MEDIUM] CWE-200 CVE-2021-39856: Acrobat Reader DC ActiveX Control versions 2021.005.20060 (and earlier), 2020.004.30006 (and earlier
Acrobat Reader DC ActiveX Control versions 2021.005.20060 (and earlier), 2020.004.30006 (and earlier) and 2017.011.30199 (and earlier) are affected by an Information Disclosure vulnerability. An unauthenticated attacker could leverage this vulnerability to obtain NTLMv2 credentials. Exploitation of this issue requires user interaction in that a vict
nvd
CVE-2021-28546P4MEDIUMCVSS 6.5≥ 15.008.20082, ≤ 20.013.200742021-04-01
CVE-2021-28546 [MEDIUM] CWE-353 CVE-2021-28546: Acrobat Reader DC versions versions 2020.013.20074 (and earlier), 2020.001.30018 (and earlier) and 2
Acrobat Reader DC versions versions 2020.013.20074 (and earlier), 2020.001.30018 (and earlier) and 2017.011.30188 (and earlier) are missing support for an integrity check. An unauthenticated attacker could leverage this vulnerability to modify content in a certified PDF without invalidating the certification. Exploitation of this issue requires user
nvd
CVE-2026-81994P4MEDIUMCVSS 6.3≥ 15.008.20082, < 26.002.219012026-09-08
CVE-2026-81994 [MEDIUM] CWE-1321 CVE-2026-81994: Acrobat Reader is affected by an Improperly Controlled Modification of Object Prototype Attributes (
Acrobat Reader is affected by an Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') vulnerability that could lead to arbitrary file system read. An attacker could exploit this vulnerability to access sensitive files and directories outside the intended access scope. Exploitation of this issue requires user int
nvd
CVE-2015-6697P4MEDIUMCVSS 6.8≥ 15.006.30060, < 15.006.30094≥ 15.008.20082, < 15.009.200692015-10-14
CVE-2015-6697 [MEDIUM] CWE-772 CVE-2015-6697: Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC
Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2015.006.30094, and Acrobat and Acrobat Reader DC Continuous before 2015.009.20069 on Windows and OS X allow attackers to obtain sensitive information about color objects from process memory by reading a light object's RGB data, a differen
nvd
CVE-2018-15932P4MEDIUMCVSS 5.5≥ 15.006.30060, ≤ 15.006.30452≥ 15.008.20082, ≤ 18.011.20063+1 more2018-10-12
CVE-2018-15932 [MEDIUM] CWE-125 CVE-2018-15932: Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.0
Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.
nvd
CVE-2021-45063P4MEDIUMCVSS 5.5≥ 15.008.20082, ≤ 21.007.200992022-01-14
CVE-2021-45063 [MEDIUM] CWE-416 CVE-2021-45063: Acrobat Reader DC version 21.007.20099 (and earlier), 20.004.30017 (and earlier) and 17.011.30204 (a
Acrobat Reader DC version 21.007.20099 (and earlier), 20.004.30017 (and earlier) and 17.011.30204 (and earlier) are affected by a use-after-free vulnerability in the processing of Format event actions that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of t
nvd
CVE-2021-44742P4MEDIUMCVSS 5.5≥ 15.008.20082, ≤ 21.007.200992022-01-14
CVE-2021-44742 [MEDIUM] CWE-125 CVE-2021-44742: Acrobat Reader DC version 21.007.20099 (and earlier), 20.004.30017 (and earlier) and 17.011.30204 (a
Acrobat Reader DC version 21.007.20099 (and earlier), 20.004.30017 (and earlier) and 17.011.30204 (and earlier) are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of th
nvd
CVE-2024-39425P4HIGHCVSS 7.0≥ 15.008.20082, < 24.002.210052024-08-14
CVE-2024-39425 [HIGH] CWE-367 CVE-2024-39425: Acrobat Reader versions 20.005.30636, 24.002.20965, 24.002.20964, 24.001.30123 and earlier are affec
Acrobat Reader versions 20.005.30636, 24.002.20965, 24.002.20964, 24.001.30123 and earlier are affected by a Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability that could lead to privilege escalation. Exploitation of this issue require local low-privilege access to the affected system and attack complexity is high.
nvd