Adobe Acrobat Reader vulnerabilities
1,142 known vulnerabilities affecting adobe/acrobat_reader.
Total CVEs
1,142
CISA KEV
21
actively exploited
Public exploits
45
Exploited in wild
41
Severity breakdown
CRITICAL350HIGH435MEDIUM328LOW29
Vulnerabilities
Page 21 of 58
CVE-2013-0601P3CRITICALCVSS 10.0v9.0v9.1+30 more2013-01-10
CVE-2013-0601 [CRITICAL] CVE-2013-0601: Adobe Reader and Acrobat 9.x before 9.5.3, 10.x before 10.1.5, and 11.x before 11.0.1 allow attacker
Adobe Reader and Acrobat 9.x before 9.5.3, 10.x before 10.1.5, and 11.x before 11.0.1 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2012-1530, CVE-2013-0605, CVE-2013-0616, CVE-2013-0619, CVE-2013-0620, and CVE-2013-0623.
nvd
CVE-2017-11307P3CRITICALCVSS 9.8≥ 11.0.0, ≤ 11.0.22≥ 17.011.30066, < 17.011.300682018-05-19
CVE-2017-11307 [CRITICAL] CWE-125 CVE-2017-11307: Adobe Acrobat and Reader versions 2017.012.20098 and earlier, 2017.011.30066 and earlier, 2015.006.3
Adobe Acrobat and Reader versions 2017.012.20098 and earlier, 2017.011.30066 and earlier, 2015.006.30355 and earlier, 11.0.22 and earlier have an exploitable out-of-bounds read vulnerability. Successful exploitation could lead to arbitrary code execution in the context of the current user.
nvd
CVE-2017-11306P3CRITICALCVSS 9.8≥ 11.0.0, ≤ 11.0.22≥ 17.011.30066, < 17.011.300682018-05-19
CVE-2017-11306 [CRITICAL] CWE-125 CVE-2017-11306: Adobe Acrobat and Reader versions 2017.012.20098 and earlier, 2017.011.30066 and earlier, 2015.006.3
Adobe Acrobat and Reader versions 2017.012.20098 and earlier, 2017.011.30066 and earlier, 2015.006.30355 and earlier, 11.0.22 and earlier have an exploitable out-of-bounds read vulnerability. Successful exploitation could lead to arbitrary code execution in the context of the current user.
nvd
CVE-2017-11240P3CRITICALCVSS 9.8≥ 11.0.0, ≤ 11.0.222018-05-19
CVE-2017-11240 [CRITICAL] CWE-125 CVE-2017-11240: Adobe Acrobat and Reader versions 2017.012.20098 and earlier, 2017.011.30066 and earlier, 2015.006.3
Adobe Acrobat and Reader versions 2017.012.20098 and earlier, 2017.011.30066 and earlier, 2015.006.30355 and earlier, 11.0.22 and earlier have an exploitable out-of-bounds read vulnerability. Successful exploitation could lead to arbitrary code execution in the context of the current user.
nvd
CVE-2017-11250P3CRITICALCVSS 9.8≥ 11.0.0, ≤ 11.0.222018-05-19
CVE-2017-11250 [CRITICAL] CWE-125 CVE-2017-11250: Adobe Acrobat and Reader versions 2017.012.20098 and earlier, 2017.011.30066 and earlier, 2015.006.3
Adobe Acrobat and Reader versions 2017.012.20098 and earlier, 2017.011.30066 and earlier, 2015.006.30355 and earlier, 11.0.22 and earlier have an exploitable out-of-bounds read vulnerability. Successful exploitation could lead to arbitrary code execution in the context of the current user.
nvd
CVE-2017-11253P3CRITICALCVSS 9.8≥ 11.0.0, ≤ 11.0.222018-05-19
CVE-2017-11253 [CRITICAL] CWE-125 CVE-2017-11253: Adobe Acrobat and Reader versions 2017.012.20098 and earlier, 2017.011.30066 and earlier, 2015.006.3
Adobe Acrobat and Reader versions 2017.012.20098 and earlier, 2017.011.30066 and earlier, 2015.006.30355 and earlier, 11.0.22 and earlier have an exploitable out-of-bounds read vulnerability. Successful exploitation could lead to arbitrary code execution in the context of the current user.
nvd
CVE-2013-0622P3CRITICALCVSS 10.0v9.0v9.1+30 more2013-01-10
CVE-2013-0622 [CRITICAL] CWE-264 CVE-2013-0622: Adobe Reader and Acrobat 9.x before 9.5.3, 10.x before 10.1.5, and 11.x before 11.0.1 allow attacker
Adobe Reader and Acrobat 9.x before 9.5.3, 10.x before 10.1.5, and 11.x before 11.0.1 allow attackers to bypass intended access restrictions via unspecified vectors, a different vulnerability than CVE-2013-0624.
nvd
CVE-2016-0933P3CRITICALCVSS 9.8≤ 11.0.13v11.0.0+12 more2016-01-14
CVE-2016-0933 [CRITICAL] CVE-2016-0933: Adobe Reader and Acrobat before 11.0.14, Acrobat and Acrobat Reader DC Classic before 15.006.30119,
Adobe Reader and Acrobat before 11.0.14, Acrobat and Acrobat Reader DC Classic before 15.006.30119, and Acrobat and Acrobat Reader DC Continuous before 15.010.20056 on Windows and OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-0931, CVE-2016-0936
nvd
CVE-2011-0602P3CRITICALCVSS 9.3v8.0v8.1+25 more2011-02-10
CVE-2011-0602 [CRITICAL] CVE-2011-0602: Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Windows and M
Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Windows and Mac OS X allow remote attackers to execute arbitrary code via crafted JP2K record types in a JPEG2000 image in a PDF file, which causes heap corruption, a different vulnerability than CVE-2011-0596, CVE-2011-0598, and CVE-2011-0599.
nvd
CVE-2022-28243P3HIGHCVSS 7.8≥ 17.011.30059, ≤ 17.012.30205≥ 20.001.30005, ≤ 20.005.30314+2 more2022-05-11
CVE-2022-28243 [HIGH] CWE-125 CVE-2022-28243: Acrobat Reader DC version 22.001.2011x (and earlier), 20.005.3033x (and earlier) and 17.012.3022x (a
Acrobat Reader DC version 22.001.2011x (and earlier), 20.005.3033x (and earlier) and 17.012.3022x (and earlier) are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the
nvd
CVE-2014-0526P3CRITICALCVSS 10.0v10.0v10.0.1+19 more2014-05-14
CVE-2014-0526 [CRITICAL] CVE-2014-0526: Adobe Reader and Acrobat 10.x before 10.1.10 and 11.x before 11.0.07 on Windows and OS X allow attac
Adobe Reader and Acrobat 10.x before 10.1.10 and 11.x before 11.0.07 on Windows and OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2014-0522, CVE-2014-0523, and CVE-2014-0524.
nvd
CVE-2010-3626P3CRITICALCVSS 9.3v8.0v8.1+22 more2010-10-06
CVE-2010-3626 [CRITICAL] CVE-2010-3626: Unspecified vulnerability in Adobe Reader and Acrobat 9.x before 9.4, and 8.x before 8.2.5 on Window
Unspecified vulnerability in Adobe Reader and Acrobat 9.x before 9.4, and 8.x before 8.2.5 on Windows and Mac OS X, allows attackers to execute arbitrary code via a crafted font, a different vulnerability than CVE-2010-2889.
nvd
CVE-2010-3620P3CRITICALCVSS 9.3v8.0v8.1+22 more2010-10-06
CVE-2010-3620 [CRITICAL] CWE-20 CVE-2010-3620: Unspecified vulnerability in Adobe Reader and Acrobat 9.x before 9.4, and 8.x before 8.2.5 on Window
Unspecified vulnerability in Adobe Reader and Acrobat 9.x before 9.4, and 8.x before 8.2.5 on Windows and Mac OS X, allows attackers to execute arbitrary code via a crafted image, a different vulnerability than CVE-2010-3629.
nvd
CVE-2010-3629P3CRITICALCVSS 9.3v8.0v8.1+22 more2010-10-06
CVE-2010-3629 [CRITICAL] CVE-2010-3629: Unspecified vulnerability in Adobe Reader and Acrobat 9.x before 9.4, and 8.x before 8.2.5 on Window
Unspecified vulnerability in Adobe Reader and Acrobat 9.x before 9.4, and 8.x before 8.2.5 on Windows and Mac OS X, allows attackers to execute arbitrary code via a crafted image, a different vulnerability than CVE-2010-3620.
nvd
CVE-2010-3624P3CRITICALCVSS 9.3v8.0v8.1+22 more2010-10-06
CVE-2010-3624 [CRITICAL] CWE-20 CVE-2010-3624: Unspecified vulnerability in Adobe Reader and Acrobat 8.x before 8.2.5 and 9.x before 9.4 on Mac OS
Unspecified vulnerability in Adobe Reader and Acrobat 8.x before 8.2.5 and 9.x before 9.4 on Mac OS X allows attackers to execute arbitrary code via a crafted image.
nvd
CVE-2011-0590P3CRITICALCVSS 9.3v8.0v8.1+25 more2011-02-10
CVE-2011-0590 [CRITICAL] CWE-20 CVE-2011-0590: Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Windows and M
Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Windows and Mac OS X allow remote attackers to execute arbitrary code via a 3D file, a different vulnerability than CVE-2011-0591, CVE-2011-0592, CVE-2011-0593, CVE-2011-0595, and CVE-2011-0600.
nvd
CVE-2013-0624P3CRITICALCVSS 10.0v9.0v9.1+30 more2013-01-10
CVE-2013-0624 [CRITICAL] CVE-2013-0624: Adobe Reader and Acrobat 9.x before 9.5.3, 10.x before 10.1.5, and 11.x before 11.0.1 allow attacker
Adobe Reader and Acrobat 9.x before 9.5.3, 10.x before 10.1.5, and 11.x before 11.0.1 allow attackers to bypass intended access restrictions via unspecified vectors, a different vulnerability than CVE-2013-0622.
nvd
CVE-2021-44711P3HIGHCVSS 7.8≥ 17.011.30059, ≤ 17.011.30204≥ 20.001.30005, ≤ 20.004.30017+1 more2022-01-14
CVE-2021-44711 [HIGH] CWE-190 CVE-2021-44711: Acrobat Reader DC version 21.007.20099 (and earlier), 20.004.30017 (and earlier) and 17.011.30204 (a
Acrobat Reader DC version 21.007.20099 (and earlier), 20.004.30017 (and earlier) and 17.011.30204 (and earlier) are affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious fil
nvd
CVE-2016-0939P3HIGHCVSS 8.8≤ 11.0.13v11.0.0+12 more2016-01-14
CVE-2016-0939 [HIGH] CVE-2016-0939: Adobe Reader and Acrobat before 11.0.14, Acrobat and Acrobat Reader DC Classic before 15.006.30119,
Adobe Reader and Acrobat before 11.0.14, Acrobat and Acrobat Reader DC Classic before 15.006.30119, and Acrobat and Acrobat Reader DC Continuous before 15.010.20056 on Windows and OS X allow attackers to execute arbitrary code or cause a denial of service (uninitialized pointer dereference and memory corruption) via unspecified vectors, a different vulnerability
nvd
CVE-2013-3355P3CRITICALCVSS 10.0v11.0v11.0.1+14 more2013-09-12
CVE-2013-3355 [CRITICAL] CVE-2013-3355: Adobe Reader and Acrobat before 10.1.8 and 11.x before 11.0.04 on Windows and Mac OS X allow attacke
Adobe Reader and Acrobat before 10.1.8 and 11.x before 11.0.04 on Windows and Mac OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2013-3352 and CVE-2013-3354.
nvd