Adobe Acrobat Reader vulnerabilities
1,132 known vulnerabilities affecting adobe/acrobat_reader.
Total CVEs
1,132
CISA KEV
22
actively exploited
Public exploits
46
Exploited in wild
42
Severity breakdown
CRITICAL350HIGH432MEDIUM321LOW29
Vulnerabilities
Page 26 of 57
CVE-2013-3355P3CRITICALCVSS 10.0v11.0v11.0.1+14 more2013-09-12
CVE-2013-3355 [CRITICAL] CVE-2013-3355: Adobe Reader and Acrobat before 10.1.8 and 11.x before 11.0.04 on Windows and Mac OS X allow attacke
Adobe Reader and Acrobat before 10.1.8 and 11.x before 11.0.04 on Windows and Mac OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2013-3352 and CVE-2013-3354.
nvd
CVE-2024-30284P3HIGHCVSS 7.8≥ 20.001.30002, < 20.005.30635≥ 20.001.30002, < 20.005.30636+1 more2024-05-15
CVE-2024-30284 [HIGH] CWE-416 CVE-2024-30284: Acrobat Reader versions 20.005.30574, 24.002.20736 and earlier are affected by a Use After Free vuln
Acrobat Reader versions 20.005.30574, 24.002.20736 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
nvd
CVE-2010-2890P3CRITICALCVSS 9.3v8.0v8.1+22 more2010-10-06
CVE-2010-2890 [CRITICAL] CWE-119 CVE-2010-2890: Adobe Reader and Acrobat 9.x before 9.4, and 8.x before 8.2.5 on Windows and Mac OS X, allow attacke
Adobe Reader and Acrobat 9.x before 9.4, and 8.x before 8.2.5 on Windows and Mac OS X, allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2010-3619, CVE-2010-3621, CVE-2010-3622, CVE-2010-3628, CVE-2010-3632, and CVE-2010-3658.
nvd
CVE-2022-24092P3HIGHCVSS 7.8≥ 17.011.30059, ≤ 17.011.30204≥ 20.001.30005, ≤ 20.004.30017+1 more2022-03-18
CVE-2022-24092 [HIGH] CWE-787 CVE-2022-24092: Acrobat Reader DC version 21.007.20099 (and earlier), 20.004.30017 (and earlier) and 17.011.30204 (a
Acrobat Reader DC version 21.007.20099 (and earlier), 20.004.30017 (and earlier) and 17.011.30204 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious font file.
nvd
CVE-2022-24091P3HIGHCVSS 7.8≥ 17.011.30059, ≤ 17.011.30204≥ 20.001.30005, ≤ 20.004.30017+1 more2022-03-18
CVE-2022-24091 [HIGH] CWE-787 CVE-2022-24091: Acrobat Reader DC version 21.007.20099 (and earlier), 20.004.30017 (and earlier) and 17.011.30204 (a
Acrobat Reader DC version 21.007.20099 (and earlier), 20.004.30017 (and earlier) and 17.011.30204 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious font file.
nvd
CVE-2011-2436P3CRITICALCVSS 9.3v8.0v8.1+34 more2011-09-15
CVE-2011-2436 [CRITICAL] CWE-119 CVE-2011-2436: Heap-based buffer overflow in the image-parsing library in Adobe Reader and Acrobat 8.x before 8.3.1
Heap-based buffer overflow in the image-parsing library in Adobe Reader and Acrobat 8.x before 8.3.1, 9.x before 9.4.6, and 10.x before 10.1.1 allows attackers to execute arbitrary code via unspecified vectors.
nvd
CVE-2024-20729P3HIGHCVSS 7.8≥ 20.001.30005, < 20.005.30574≤ 23.008.204702024-02-15
CVE-2024-20729 [HIGH] CWE-416 CVE-2024-20729: Acrobat Reader versions 20.005.30539, 23.008.20470 and earlier are affected by a Use After Free vuln
Acrobat Reader versions 20.005.30539, 23.008.20470 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
nvd
CVE-2016-0945P3CRITICALCVSS 9.8≤ 11.0.13v11.0.0+12 more2016-01-14
CVE-2016-0945 [CRITICAL] CVE-2016-0945: Adobe Reader and Acrobat before 11.0.14, Acrobat and Acrobat Reader DC Classic before 15.006.30119,
Adobe Reader and Acrobat before 11.0.14, Acrobat and Acrobat Reader DC Classic before 15.006.30119, and Acrobat and Acrobat Reader DC Continuous before 15.010.20056 on Windows and OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-0931, CVE-2016-0933
nvd
CVE-2016-0946P3CRITICALCVSS 9.8≤ 11.0.13v11.0.0+12 more2016-01-14
CVE-2016-0946 [CRITICAL] CVE-2016-0946: Adobe Reader and Acrobat before 11.0.14, Acrobat and Acrobat Reader DC Classic before 15.006.30119,
Adobe Reader and Acrobat before 11.0.14, Acrobat and Acrobat Reader DC Classic before 15.006.30119, and Acrobat and Acrobat Reader DC Continuous before 15.010.20056 on Windows and OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-0931, CVE-2016-0933
nvd
CVE-2016-0944P3CRITICALCVSS 9.8≤ 11.0.13v11.0.0+12 more2016-01-14
CVE-2016-0944 [CRITICAL] CVE-2016-0944: Adobe Reader and Acrobat before 11.0.14, Acrobat and Acrobat Reader DC Classic before 15.006.30119,
Adobe Reader and Acrobat before 11.0.14, Acrobat and Acrobat Reader DC Classic before 15.006.30119, and Acrobat and Acrobat Reader DC Continuous before 15.010.20056 on Windows and OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-0931, CVE-2016-0933
nvd
CVE-2016-0942P3CRITICALCVSS 9.8≤ 11.0.13v11.0.0+12 more2016-01-14
CVE-2016-0942 [CRITICAL] CVE-2016-0942: Adobe Reader and Acrobat before 11.0.14, Acrobat and Acrobat Reader DC Classic before 15.006.30119,
Adobe Reader and Acrobat before 11.0.14, Acrobat and Acrobat Reader DC Classic before 15.006.30119, and Acrobat and Acrobat Reader DC Continuous before 15.010.20056 on Windows and OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-0931, CVE-2016-0933
nvd
CVE-2024-41831P3HIGHCVSS 7.8≥ 20.001.3005, < 20.005.30655≤ 24.001.301232024-08-14
CVE-2024-41831 [HIGH] CWE-416 CVE-2024-41831: Acrobat Reader versions 20.005.30636, 24.002.20965, 24.002.20964, 24.001.30123 and earlier are affec
Acrobat Reader versions 20.005.30636, 24.002.20965, 24.002.20964, 24.001.30123 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
nvd
CVE-2017-11229P3HIGHCVSS 8.8≥ 17.011.00000, ≤ 17.011.300662017-08-11
CVE-2017-11229 [HIGH] CVE-2017-11229: Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earl
Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has a security bypass vulnerability when manipulating Forms Data Format (FDF).
nvd
CVE-2014-0524P3CRITICALCVSS 10.0v10.0v10.0.1+19 more2014-05-14
CVE-2014-0524 [CRITICAL] CVE-2014-0524: Adobe Reader and Acrobat 10.x before 10.1.10 and 11.x before 11.0.07 on Windows and OS X allow attac
Adobe Reader and Acrobat 10.x before 10.1.10 and 11.x before 11.0.07 on Windows and OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2014-0522, CVE-2014-0523, and CVE-2014-0526.
nvd
CVE-2014-0522P3CRITICALCVSS 10.0v10.0v10.0.1+19 more2014-05-14
CVE-2014-0522 [CRITICAL] CWE-119 CVE-2014-0522: Adobe Reader and Acrobat 10.x before 10.1.10 and 11.x before 11.0.07 on Windows and OS X allow attac
Adobe Reader and Acrobat 10.x before 10.1.10 and 11.x before 11.0.07 on Windows and OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2014-0523, CVE-2014-0524, and CVE-2014-0526.
nvd
CVE-2022-34217P3HIGHCVSS 7.8≥ 20.001.30005, ≤ 20.005.30334≥ 20.001.30005, ≤ 20.005.30331+3 more2022-07-15
CVE-2022-34217 [HIGH] CWE-787 CVE-2022-34217: Adobe Acrobat Reader versions 22.001.20142 (and earlier), 20.005.30334 (and earlier) and 17.012.3022
Adobe Acrobat Reader versions 22.001.20142 (and earlier), 20.005.30334 (and earlier) and 17.012.30229 (and earlier) are affected by an Out-Of-Bounds Write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
nvd
CVE-2024-39424P3HIGHCVSS 7.8≥ 20.001.3005, < 20.005.30655≤ 24.001.301232024-08-14
CVE-2024-39424 [HIGH] CWE-416 CVE-2024-39424: Acrobat Reader versions 20.005.30636, 24.002.20965, 24.002.20964, 24.001.30123 and earlier are affec
Acrobat Reader versions 20.005.30636, 24.002.20965, 24.002.20964, 24.001.30123 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
nvd
CVE-2024-39422P3HIGHCVSS 7.8≥ 20.001.3005, < 20.005.30655≤ 24.001.301232024-08-14
CVE-2024-39422 [HIGH] CWE-416 CVE-2024-39422: Acrobat Reader versions 20.005.30636, 24.002.20965, 24.002.20964, 24.001.30123 and earlier are affec
Acrobat Reader versions 20.005.30636, 24.002.20965, 24.002.20964, 24.001.30123 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
nvd
CVE-2024-39383P3HIGHCVSS 7.8≥ 20.001.3005, < 20.005.30655≤ 24.001.301232024-08-14
CVE-2024-39383 [HIGH] CWE-416 CVE-2024-39383: Acrobat Reader versions 20.005.30636, 24.002.20965, 24.002.20964, 24.001.30123 and earlier are affec
Acrobat Reader versions 20.005.30636, 24.002.20965, 24.002.20964, 24.001.30123 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
nvd
CVE-2012-0775P3CRITICALCVSS 10.0v9.0v9.1+18 more2012-04-10
CVE-2012-0775 [CRITICAL] CWE-119 CVE-2012-0775: The JavaScript implementation in Adobe Reader and Acrobat 9.x before 9.5.1 and 10.x before 10.1.3 al
The JavaScript implementation in Adobe Reader and Acrobat 9.x before 9.5.1 and 10.x before 10.1.3 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.
nvd