Adobe Acrobat Reader vulnerabilities
1,107 known vulnerabilities affecting adobe/acrobat_reader.
Total CVEs
1,107
CISA KEV
21
actively exploited
Public exploits
43
Exploited in wild
25
Severity breakdown
CRITICAL352HIGH412MEDIUM316LOW27
Vulnerabilities
Page 19 of 56
CVE-2021-28559MEDIUMCVSS 5.3≥ 17.011.30059, ≤ 17.011.30194≥ 20.001.30005, ≤ 20.001.30020+1 more2021-09-02
CVE-2021-28559 [MEDIUM] CWE-359 CVE-2021-28559: Acrobat Reader DC versions versions 2021.001.20150 (and earlier), 2020.001.30020 (and earlier) and 2
Acrobat Reader DC versions versions 2021.001.20150 (and earlier), 2020.001.30020 (and earlier) and 2017.011.30194 (and earlier) are affected by an Information Exposure vulnerability. An unauthenticated attacker could leverage this vulnerability to get access to restricted data stored within global variables and objects.
cvelistv5nvd
CVE-2021-28557MEDIUMCVSS 4.3≥ 17.011.30059, ≤ 17.011.30194≥ 20.001.30005, ≤ 20.001.30020+1 more2021-09-02
CVE-2021-28557 [MEDIUM] CWE-125 CVE-2021-28557: Acrobat Reader DC versions versions 2021.001.20150 (and earlier), 2020.001.30020 (and earlier) and 2
Acrobat Reader DC versions versions 2021.001.20150 (and earlier), 2020.001.30020 (and earlier) and 2017.011.30194 (and earlier) are affected by an Out-of-bounds Read vulnerability. An unauthenticated attacker could leverage this vulnerability to leak sensitive system information in the context of the current user. Exploitation of this issue requires
cvelistv5nvd
CVE-2021-28631HIGHCVSS 7.8≥ 17.011.30180, ≤ 17.011.30196≥ 20.001.30005, ≤ 20.001.30025+1 more2021-08-24
CVE-2021-28631 [HIGH] CWE-416 CVE-2021-28631: Acrobat Reader DC versions versions 2021.001.20155 (and earlier), 2020.001.30025 (and earlier) and 2
Acrobat Reader DC versions versions 2021.001.20155 (and earlier), 2020.001.30025 (and earlier) and 2017.011.30196 (and earlier) are affected by an Use After Free vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires user i
cvelistv5nvd
CVE-2021-28551HIGHCVSS 7.8≥ 17.011.30180, ≤ 17.011.30194≥ 20.001.30005, ≤ 20.001.30020+1 more2021-08-24
CVE-2021-28551 [HIGH] CWE-125 CVE-2021-28551: Acrobat Reader DC versions versions 2021.001.20155 (and earlier), 2020.001.30025 (and earlier) and 2
Acrobat Reader DC versions versions 2021.001.20155 (and earlier), 2020.001.30025 (and earlier) and 2017.011.30196 (and earlier) are affected by an Out-of-bounds read vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires us
cvelistv5nvd
CVE-2021-28552HIGHCVSS 7.8≥ 17.011.30180, ≤ 17.011.30196≥ 20.001.30005, ≤ 20.001.30025+1 more2021-08-24
CVE-2021-28552 [HIGH] CWE-416 CVE-2021-28552: Acrobat Reader DC versions versions 2021.001.20155 (and earlier), 2020.001.30025 (and earlier) and 2
Acrobat Reader DC versions versions 2021.001.20155 (and earlier), 2020.001.30025 (and earlier) and 2017.011.30196 (and earlier) are affected by an Use After Free vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires user i
cvelistv5nvd
CVE-2021-28632HIGHCVSS 7.8≥ 17.011.30180, ≤ 17.011.30196≥ 20.001.30005, ≤ 20.001.30025+1 more2021-08-24
CVE-2021-28632 [HIGH] CWE-416 CVE-2021-28632: Acrobat Reader DC versions versions 2021.001.20155 (and earlier), 2020.001.30025 (and earlier) and 2
Acrobat Reader DC versions versions 2021.001.20155 (and earlier), 2020.001.30025 (and earlier) and 2017.011.30196 (and earlier) are affected by an Use After Free vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires user i
cvelistv5nvd
CVE-2021-28554HIGHCVSS 7.8≥ 17.011.30180, ≤ 17.011.30196≥ 20.001.30005, ≤ 20.001.30025+1 more2021-08-24
CVE-2021-28554 [HIGH] CWE-125 CVE-2021-28554: Acrobat Reader DC versions versions 2021.001.20155 (and earlier), 2020.001.30025 (and earlier) and 2
Acrobat Reader DC versions versions 2021.001.20155 (and earlier), 2020.001.30025 (and earlier) and 2017.011.30196 (and earlier) are affected by an Out-of-bounds Read vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires us
cvelistv5nvd
CVE-2021-35983HIGHCVSS 7.8≥ unspecified, ≤ 2020.004.300052021-08-20
CVE-2021-35983 [HIGH] CWE-416 CVE-2021-35983: Acrobat Reader DC versions 2021.005.20054 (and earlier), 2020.004.30005 (and earlier) and 2017.011.3
Acrobat Reader DC versions 2021.005.20054 (and earlier), 2020.004.30005 (and earlier) and 2017.011.30197 (and earlier) are affected by an Use-after-free vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires user interactio
cvelistv5nvd
CVE-2021-28642HIGHCVSS 7.8≥ unspecified, ≤ 2020.004.300052021-08-20
CVE-2021-28642 [HIGH] CWE-787 CVE-2021-28642: Acrobat Reader DC versions 2021.005.20054 (and earlier), 2020.004.30005 (and earlier) and 2017.011.3
Acrobat Reader DC versions 2021.005.20054 (and earlier), 2020.004.30005 (and earlier) and 2017.011.30197 (and earlier) are affected by an Out-of-bounds write vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires user inter
cvelistv5nvd
CVE-2021-28635HIGHCVSS 7.8≥ unspecified, ≤ 2020.004.300052021-08-20
CVE-2021-28635 [HIGH] CWE-416 CVE-2021-28635: Acrobat Reader DC versions 2021.005.20054 (and earlier), 2020.004.30005 (and earlier) and 2017.011.3
Acrobat Reader DC versions 2021.005.20054 (and earlier), 2020.004.30005 (and earlier) and 2017.011.30197 (and earlier) are affected by a use-after-free vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction
cvelistv5nvd
CVE-2021-28641HIGHCVSS 7.8≥ unspecified, ≤ 2020.004.300052021-08-20
CVE-2021-28641 [HIGH] CWE-416 CVE-2021-28641: Acrobat Reader DC versions 2021.005.20054 (and earlier), 2020.004.30005 (and earlier) and 2017.011.3
Acrobat Reader DC versions 2021.005.20054 (and earlier), 2020.004.30005 (and earlier) and 2017.011.30197 (and earlier) are affected by an Use-after-free vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires user interactio
cvelistv5nvd
CVE-2021-28636HIGHCVSS 7.3≥ unspecified, ≤ 2020.004.300052021-08-20
CVE-2021-28636 [HIGH] CWE-427 CVE-2021-28636: Acrobat Reader DC versions 2021.005.20054 (and earlier), 2020.004.30005 (and earlier) and 2017.011.3
Acrobat Reader DC versions 2021.005.20054 (and earlier), 2020.004.30005 (and earlier) and 2017.011.30197 (and earlier) are affected by an Uncontrolled Search Path Element vulnerability. An attacker with access to the victim's C:/ folder could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitati
cvelistv5nvd
CVE-2021-28637HIGHCVSS 7.1≥ unspecified, ≤ 2020.004.300052021-08-20
CVE-2021-28637 [HIGH] CWE-125 CVE-2021-28637: Acrobat Reader DC versions 2021.005.20054 (and earlier), 2020.004.30005 (and earlier) and 2017.011.3
Acrobat Reader DC versions 2021.005.20054 (and earlier), 2020.004.30005 (and earlier) and 2017.011.30197 (and earlier) are affected by an out-of-bounds read vulnerability. An unauthenticated attacker could leverage this vulnerability achieve arbitrary read / write system information in the context of the current user. Exploitation of this issue requir
cvelistv5nvd
CVE-2021-28640HIGHCVSS 7.3≥ unspecified, ≤ 2020.004.300052021-08-20
CVE-2021-28640 [HIGH] CWE-416 CVE-2021-28640: Acrobat Reader DC versions 2021.005.20054 (and earlier), 2020.004.30005 (and earlier) and 2017.011.3
Acrobat Reader DC versions 2021.005.20054 (and earlier), 2020.004.30005 (and earlier) and 2017.011.30197 (and earlier) are affected by an Use-after-free vulnerability. An authenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction
cvelistv5nvd
CVE-2021-28639HIGHCVSS 7.8≥ unspecified, ≤ 2020.004.300052021-08-20
CVE-2021-28639 [HIGH] CWE-416 CVE-2021-28639: Acrobat Reader DC versions 2021.005.20054 (and earlier), 2020.004.30005 (and earlier) and 2017.011.3
Acrobat Reader DC versions 2021.005.20054 (and earlier), 2020.004.30005 (and earlier) and 2017.011.30197 (and earlier) are affected by an Use-after-free vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires user interactio
cvelistv5nvd
CVE-2021-35981HIGHCVSS 7.8≥ unspecified, ≤ 2020.004.300052021-08-20
CVE-2021-35981 [HIGH] CWE-416 CVE-2021-35981: Acrobat Reader DC versions 2021.005.20054 (and earlier), 2020.004.30005 (and earlier) and 2017.011.3
Acrobat Reader DC versions 2021.005.20054 (and earlier), 2020.004.30005 (and earlier) and 2017.011.30197 (and earlier) are affected by an Use-after-free vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires user interactio
cvelistv5nvd
CVE-2021-28634HIGHCVSS 8.2≥ unspecified, ≤ 2020.004.300052021-08-20
CVE-2021-28634 [HIGH] CWE-78 CVE-2021-28634: Acrobat Reader DC versions 2021.005.20054 (and earlier), 2020.004.30005 (and earlier) and 2017.011.3
Acrobat Reader DC versions 2021.005.20054 (and earlier), 2020.004.30005 (and earlier) and 2017.011.30197 (and earlier) are affected by an Improper Neutralization of Special Elements used in an OS Command. An authenticated attacker could leverage this vulnerability to achieve arbitrary code execution on the host machine in the context of the current use
cvelistv5nvd
CVE-2021-28638HIGHCVSS 7.8≥ unspecified, ≤ 2020.004.300052021-08-20
CVE-2021-28638 [HIGH] CWE-122 CVE-2021-28638: Acrobat Reader DC versions 2021.005.20054 (and earlier), 2020.004.30005 (and earlier) and 2017.011.3
Acrobat Reader DC versions 2021.005.20054 (and earlier), 2020.004.30005 (and earlier) and 2017.011.30197 (and earlier) are affected by a Heap-based Buffer overflow vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires user
cvelistv5nvd
CVE-2021-35985MEDIUMCVSS 5.5≥ unspecified, ≤ 2020.004.300052021-08-20
CVE-2021-35985 [MEDIUM] CWE-476 CVE-2021-35985: Acrobat Reader DC versions 2021.005.20054 (and earlier), 2020.004.30005 (and earlier) and 2017.011.3
Acrobat Reader DC versions 2021.005.20054 (and earlier), 2020.004.30005 (and earlier) and 2017.011.30197 (and earlier) are affected by a Null pointer dereference vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve an application denial-of-service in the context of the current user. Exploitation of this issue requi
cvelistv5nvd
CVE-2021-35984MEDIUMCVSS 6.5≥ unspecified, ≤ 2020.004.300052021-08-20
CVE-2021-35984 [MEDIUM] CWE-476 CVE-2021-35984: Acrobat Reader DC versions 2021.005.20054 (and earlier), 2020.004.30005 (and earlier) and 2017.011.3
Acrobat Reader DC versions 2021.005.20054 (and earlier), 2020.004.30005 (and earlier) and 2017.011.30197 (and earlier) are affected by a Null pointer dereference vulnerability. An authenticated attacker could leverage this vulnerability achieve an application denial-of-service in the context of the current user. Exploitation of this issue does not r
cvelistv5nvd