cbcvebase.

Adobe Acrobat Reader vulnerabilities

1,132 known vulnerabilities affecting adobe/acrobat_reader.

Total CVEs
1,132
CISA KEV
22
actively exploited
Public exploits
46
Exploited in wild
42
Severity breakdown
CRITICAL350HIGH432MEDIUM321LOW29

Vulnerabilities

Page 34 of 57
CVE-2022-34215P3HIGHCVSS 7.8≥ 20.001.30005, ≤ 20.005.30334≥ 20.001.30005, ≤ 20.005.30331+3 more2022-07-15
CVE-2022-34215 [HIGH] CWE-125 CVE-2022-34215: Adobe Acrobat Reader versions 22.001.20142 (and earlier), 20.005.30334 (and earlier) and 17.012.3022 Adobe Acrobat Reader versions 22.001.20142 (and earlier), 20.005.30334 (and earlier) and 17.012.30229 (and earlier) are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of
nvd
CVE-2022-34222P3HIGHCVSS 7.8≥ 20.001.30005, ≤ 20.005.30334≥ 20.001.30005, ≤ 20.005.30331+3 more2022-07-15
CVE-2022-34222 [HIGH] CWE-125 CVE-2022-34222: Adobe Acrobat Reader versions 22.001.20142 (and earlier), 20.005.30334 (and earlier) and 17.012.3022 Adobe Acrobat Reader versions 22.001.20142 (and earlier), 20.005.30334 (and earlier) and 17.012.30229 (and earlier) are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of
nvd
CVE-2022-28241P3HIGHCVSS 7.8≥ 17.011.30059, ≤ 17.012.30205≥ 20.001.30005, ≤ 20.005.30314+2 more2022-05-11
CVE-2022-28241 [HIGH] CWE-125 CVE-2022-28241: Acrobat Reader DC version 22.001.2011x (and earlier), 20.005.3033x (and earlier) and 17.012.3022x (a Acrobat Reader DC version 22.001.2011x (and earlier), 20.005.3033x (and earlier) and 17.012.3022x (and earlier) are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the
nvd
CVE-2023-26420P3HIGHCVSS 7.8≥ 20.001.3005, ≤ 20.005.30441≥ unspecified, ≤ 23.001.200932023-04-12
CVE-2023-26420 [HIGH] CWE-416 CVE-2023-26420: Adobe Acrobat Reader versions 23.001.20093 (and earlier) and 20.005.30441 (and earlier) are affected Adobe Acrobat Reader versions 23.001.20093 (and earlier) and 20.005.30441 (and earlier) are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
nvd
CVE-2023-26424P3HIGHCVSS 7.8≥ 20.001.3005, ≤ 20.005.30441≥ unspecified, ≤ 23.001.200932023-04-12
CVE-2023-26424 [HIGH] CWE-416 CVE-2023-26424: Adobe Acrobat Reader versions 23.001.20093 (and earlier) and 20.005.30441 (and earlier) are affected Adobe Acrobat Reader versions 23.001.20093 (and earlier) and 20.005.30441 (and earlier) are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
nvd
CVE-2023-26418P3HIGHCVSS 7.8≥ 20.001.3005, ≤ 20.005.30441≥ unspecified, ≤ 23.001.200932023-04-12
CVE-2023-26418 [HIGH] CWE-416 CVE-2023-26418: Adobe Acrobat Reader versions 23.001.20093 (and earlier) and 20.005.30441 (and earlier) are affected Adobe Acrobat Reader versions 23.001.20093 (and earlier) and 20.005.30441 (and earlier) are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
nvd
CVE-2023-26419P3HIGHCVSS 7.8≥ 20.001.3005, ≤ 20.005.30441≥ unspecified, ≤ 23.001.200932023-04-12
CVE-2023-26419 [HIGH] CWE-416 CVE-2023-26419: Adobe Acrobat Reader versions 23.001.20093 (and earlier) and 20.005.30441 (and earlier) are affected Adobe Acrobat Reader versions 23.001.20093 (and earlier) and 20.005.30441 (and earlier) are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
nvd
CVE-2022-28838P3HIGHCVSS 7.8≥ 17.011.30059, ≤ 17.012.30205≥ 20.001.30005, ≤ 20.005.30314+2 more2022-05-11
CVE-2022-28838 [HIGH] CWE-416 CVE-2022-28838: Acrobat Acrobat Pro DC version 22.001.2011x (and earlier), 20.005.3033x (and earlier) and 17.012.302 Acrobat Acrobat Pro DC version 22.001.2011x (and earlier), 20.005.3033x (and earlier) and 17.012.3022x (and earlier) are affected by a use-after-free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
nvd
CVE-2022-38450P3HIGHCVSS 7.8≥ 20.001.30005, < 20.005.30407≥ unspecified, ≤ 20.005.303812022-10-14
CVE-2022-38450 [HIGH] CWE-121 CVE-2022-38450: Adobe Acrobat Reader versions 22.002.20212 (and earlier) and 20.005.30381 (and earlier) are affected Adobe Acrobat Reader versions 22.002.20212 (and earlier) and 20.005.30381 (and earlier) are affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
nvd
CVE-2011-2440P3CRITICALCVSS 9.3v8.0v8.1+34 more2011-09-15
CVE-2011-2440 [CRITICAL] CWE-399 CVE-2011-2440: Use-after-free vulnerability in Adobe Reader and Acrobat 8.x before 8.3.1, 9.x before 9.4.6, and 10. Use-after-free vulnerability in Adobe Reader and Acrobat 8.x before 8.3.1, 9.x before 9.4.6, and 10.x before 10.1.1 allows attackers to execute arbitrary code via unspecified vectors.
nvd
CVE-2023-26417P3HIGHCVSS 7.8≥ 20.001.3005, ≤ 20.005.30441≥ unspecified, ≤ 23.001.200932023-04-12
CVE-2023-26417 [HIGH] CWE-416 CVE-2023-26417: Adobe Acrobat Reader versions 23.001.20093 (and earlier) and 20.005.30441 (and earlier) are affected Adobe Acrobat Reader versions 23.001.20093 (and earlier) and 20.005.30441 (and earlier) are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
nvd
CVE-2021-21062P3HIGHCVSS 7.8≥ 17.011.30059, ≤ 17.011.30188≥ 20.001.30005, ≤ 20.001.30018+1 more2021-02-11
CVE-2021-21062 [HIGH] CWE-787 CVE-2021-21062: Acrobat Reader DC versions versions 2020.013.20074 (and earlier), 2020.001.30018 (and earlier) and 2 Acrobat Reader DC versions versions 2020.013.20074 (and earlier), 2020.001.30018 (and earlier) and 2017.011.30188 (and earlier) are affected by a Memory corruption vulnerability when parsing a specially crafted PDF file. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user
nvd
CVE-2021-21058P3HIGHCVSS 7.8≥ 17.011.30059, ≤ 17.011.30188≥ 20.001.30005, ≤ 20.001.30018+1 more2021-02-11
CVE-2021-21058 [HIGH] CWE-787 CVE-2021-21058: Acrobat Reader DC versions versions 2020.013.20074 (and earlier), 2020.001.30018 (and earlier) and 2 Acrobat Reader DC versions versions 2020.013.20074 (and earlier), 2020.001.30018 (and earlier) and 2017.011.30188 (and earlier) are affected by a Memory corruption vulnerability when parsing a specially crafted PDF file. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user
nvd
CVE-2021-21063P3HIGHCVSS 7.8≥ 17.011.30059, ≤ 17.011.30188≥ 20.001.30005, ≤ 20.001.30018+1 more2021-02-11
CVE-2021-21063 [HIGH] CWE-787 CVE-2021-21063: Acrobat Reader DC versions versions 2020.013.20074 (and earlier), 2020.001.30018 (and earlier) and 2 Acrobat Reader DC versions versions 2020.013.20074 (and earlier), 2020.001.30018 (and earlier) and 2017.011.30188 (and earlier) are affected by a Memory corruption vulnerability when parsing a specially crafted PDF file. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user
nvd
CVE-2021-21059P3HIGHCVSS 7.8≥ 17.011.30059, ≤ 17.011.30188≥ 20.001.30005, ≤ 20.001.30018+1 more2021-02-11
CVE-2021-21059 [HIGH] CWE-787 CVE-2021-21059: Acrobat Reader DC versions versions 2020.013.20074 (and earlier), 2020.001.30018 (and earlier) and 2 Acrobat Reader DC versions versions 2020.013.20074 (and earlier), 2020.001.30018 (and earlier) and 2017.011.30188 (and earlier) are affected by a Memory corruption vulnerability when parsing a specially crafted PDF file. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user
nvd
CVE-2011-0563P3CRITICALCVSS 9.3v8.0v8.1+25 more2011-02-10
CVE-2011-0563 [CRITICAL] CWE-119 CVE-2011-0563: Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Windows and M Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Windows and Mac OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2011-0589 and CVE-2011-0606.
nvd
CVE-2010-2205P3CRITICALCVSS 9.3v9.0v9.1+17 more2010-06-30
CVE-2010-2205 [CRITICAL] CWE-94 CVE-2010-2205: Adobe Reader and Acrobat 9.x before 9.3.3, and 8.x before 8.2.3 on Windows and Mac OS X, access unin Adobe Reader and Acrobat 9.x before 9.3.3, and 8.x before 8.2.3 on Windows and Mac OS X, access uninitialized memory, which allows attackers to execute arbitrary code via unspecified vectors.
nvd
CVE-2010-2202P3CRITICALCVSS 9.3v9.0v9.1+17 more2010-06-30
CVE-2010-2202 [CRITICAL] CVE-2010-2202: Adobe Reader and Acrobat 9.x before 9.3.3, and 8.x before 8.2.3 on Windows and Mac OS X, allow attac Adobe Reader and Acrobat 9.x before 9.3.3, and 8.x before 8.2.3 on Windows and Mac OS X, allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2010-1295, CVE-2010-2207, CVE-2010-2209, CVE-2010-2210, CVE-2010-2211, and CVE-2010-2212.
nvd
CVE-2010-2211P3CRITICALCVSS 9.3v9.0v9.1+17 more2010-06-30
CVE-2010-2211 [CRITICAL] CVE-2010-2211: Adobe Reader and Acrobat 9.x before 9.3.3, and 8.x before 8.2.3 on Windows and Mac OS X, allow attac Adobe Reader and Acrobat 9.x before 9.3.3, and 8.x before 8.2.3 on Windows and Mac OS X, allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2010-1295, CVE-2010-2202, CVE-2010-2207, CVE-2010-2209, CVE-2010-2210, and CVE-2010-2212.
nvd
CVE-2010-1295P3CRITICALCVSS 9.3v9.0v9.1+17 more2010-06-30
CVE-2010-1295 [CRITICAL] CWE-119 CVE-2010-1295: Adobe Reader and Acrobat 9.x before 9.3.3, and 8.x before 8.2.3 on Windows and Mac OS X, allow attac Adobe Reader and Acrobat 9.x before 9.3.3, and 8.x before 8.2.3 on Windows and Mac OS X, allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2010-2202, CVE-2010-2207, CVE-2010-2209, CVE-2010-2210, CVE-2010-2211, and CVE-2010-2212.
nvd
Adobe Acrobat Reader vulnerabilities | cvebase