Adobe Acrobat Reader vulnerabilities
1,142 known vulnerabilities affecting adobe/acrobat_reader.
Total CVEs
1,142
CISA KEV
21
actively exploited
Public exploits
45
Exploited in wild
41
Severity breakdown
CRITICAL350HIGH435MEDIUM328LOW29
Vulnerabilities
Page 52 of 58
CVE-2015-4444P4MEDIUMCVSS 5.0≥ 10.0, < 10.1.15≥ 11.0.0, < 11.0.122015-07-15
CVE-2015-4444 [MEDIUM] CVE-2015-4444: Adobe Reader and Acrobat 10.x before 10.1.15 and 11.x before 11.0.12, Acrobat and Acrobat Reader DC
Adobe Reader and Acrobat 10.x before 10.1.15 and 11.x before 11.0.12, Acrobat and Acrobat Reader DC Classic before 2015.006.30060, and Acrobat and Acrobat Reader DC Continuous before 2015.008.20082 on Windows and OS X allow attackers to cause a denial of service (NULL pointer dereference) via unspecified vectors, a different vulnerability than CVE-2015-4443.
nvd
CVE-2024-49532P4MEDIUMCVSS 5.5fixed in 20.005.30748≤ 20.005.307102024-12-10
CVE-2024-49532 [MEDIUM] CWE-125 CVE-2024-49532: Acrobat Reader versions 24.005.20307, 24.001.30213, 24.001.30193, 20.005.30730, 20.005.30710 and ear
Acrobat Reader versions 24.005.20307, 24.001.30213, 24.001.30193, 20.005.30730, 20.005.30710 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that
nvd
CVE-2024-49533P4MEDIUMCVSS 5.5fixed in 20.005.30748≤ 20.005.307102024-12-10
CVE-2024-49533 [MEDIUM] CWE-125 CVE-2024-49533: Acrobat Reader versions 24.005.20307, 24.001.30213, 24.001.30193, 20.005.30730, 20.005.30710 and ear
Acrobat Reader versions 24.005.20307, 24.001.30213, 24.001.30193, 20.005.30730, 20.005.30710 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that
nvd
CVE-2024-49534P4MEDIUMCVSS 5.5fixed in 20.005.30748≤ 20.005.307102024-12-10
CVE-2024-49534 [MEDIUM] CWE-125 CVE-2024-49534: Acrobat Reader versions 24.005.20307, 24.001.30213, 24.001.30193, 20.005.30730, 20.005.30710 and ear
Acrobat Reader versions 24.005.20307, 24.001.30213, 24.001.30193, 20.005.30730, 20.005.30710 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that
nvd
CVE-2024-30302P4MEDIUMCVSS 5.5≥ 20.001.30002, < 20.005.30574≤ 23.008.204702024-05-02
CVE-2024-30302 [MEDIUM] CWE-416 CVE-2024-30302: Acrobat Reader versions 20.005.30539, 23.008.20470 and earlier are affected by a Use After Free vuln
Acrobat Reader versions 20.005.30539, 23.008.20470 and earlier are affected by a Use After Free vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
nvd
CVE-2022-44519P4MEDIUMCVSS 5.5≥ 17.011.30059, ≤ 17.012.30205≥ 20.001.30005, ≤ 20.005.30314+2 more2024-12-19
CVE-2022-44519 [MEDIUM] CWE-416 CVE-2022-44519: Acrobat Reader DC version 22.001.20085 (and earlier), 20.005.3031x (and earlier) and 17.012.30205 (a
Acrobat Reader DC version 22.001.20085 (and earlier), 20.005.3031x (and earlier) and 17.012.30205 (and earlier) are affected by a use-after-free vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in tha
nvd
CVE-2024-34130P4MEDIUMCVSS 5.5fixed in 24.5.0.336942024-06-13
CVE-2024-34130 [MEDIUM] CWE-863 CVE-2024-34130: Acrobat Mobile Sign Android versions 24.4.2.33155 and earlier are affected by an Incorrect Authoriza
Acrobat Mobile Sign Android versions 24.4.2.33155 and earlier are affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. An attacker could exploit this vulnerability to access confidential information. Exploitation of this issue does not require user interaction.
nvd
CVE-2022-44517P4MEDIUMCVSS 5.5≥ 17.011.30059, < 17.012.30229≥ 20.001.30002, < 20.005.30334+3 more2024-12-19
CVE-2022-44517 [MEDIUM] CWE-125 CVE-2022-44517: Acrobat Reader DC version 22.001.20085 (and earlier), 20.005.3031x (and earlier) and 17.012.30205 (a
Acrobat Reader DC version 22.001.20085 (and earlier), 20.005.3031x (and earlier) and 17.012.30205 (and earlier) are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to bypass mitigations such as ASLR.
nvd
CVE-2022-44516P4MEDIUMCVSS 5.5≥ 17.011.30059, < 17.012.30229≥ 20.001.30002, < 20.005.30334+3 more2024-12-19
CVE-2022-44516 [MEDIUM] CWE-125 CVE-2022-44516: Acrobat Reader DC version 22.001.20085 (and earlier), 20.005.3031x (and earlier) and 17.012.30205 (a
Acrobat Reader DC version 22.001.20085 (and earlier), 20.005.3031x (and earlier) and 17.012.30205 (and earlier) are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to bypass mitigations such as ASLR.
nvd
CVE-2022-44515P4MEDIUMCVSS 5.5≥ 17.011.30059, < 17.012.30229≥ 20.001.30002, < 20.005.30334+3 more2024-12-19
CVE-2022-44515 [MEDIUM] CWE-125 CVE-2022-44515: Acrobat Reader DC version 22.001.20085 (and earlier), 20.005.3031x (and earlier) and 17.012.30205 (a
Acrobat Reader DC version 22.001.20085 (and earlier), 20.005.3031x (and earlier) and 17.012.30205 (and earlier) are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to bypass mitigations such as ASLR.
nvd
CVE-2026-80160P4MEDIUMCVSS 5.5≤ 26.002.219002026-09-08
CVE-2026-80160 [MEDIUM] CWE-125 CVE-2026-80160: Acrobat Reader is affected by an out-of-bounds read vulnerability that could lead to disclosure of s
Acrobat Reader is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
nvd
CVE-2026-81982P4MEDIUMCVSS 5.5≤ 26.002.219002026-09-08
CVE-2026-81982 [MEDIUM] CWE-125 CVE-2026-81982: Acrobat Reader is affected by an out-of-bounds read vulnerability that could lead to disclosure of s
Acrobat Reader is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
nvd
CVE-2026-81977P4MEDIUMCVSS 5.5≤ 26.002.219002026-09-08
CVE-2026-81977 [MEDIUM] CWE-191 CVE-2026-81977: Acrobat Reader is affected by an Integer Underflow (Wrap or Wraparound) vulnerability that could lea
Acrobat Reader is affected by an Integer Underflow (Wrap or Wraparound) vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
nvd
CVE-2026-79910P4MEDIUMCVSS 5.5≤ 26.002.219002026-09-08
CVE-2026-79910 [MEDIUM] CWE-125 CVE-2026-79910: Acrobat Reader is affected by an out-of-bounds read vulnerability that could lead to disclosure of s
Acrobat Reader is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
nvd
CVE-2026-81991P4MEDIUMCVSS 5.5≤ 26.002.219002026-09-08
CVE-2026-81991 [MEDIUM] CWE-125 CVE-2026-81991: Acrobat Reader is affected by an out-of-bounds read vulnerability that could lead to disclosure of s
Acrobat Reader is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
nvd
CVE-2026-81978P4MEDIUMCVSS 5.5≤ 26.002.219002026-09-08
CVE-2026-81978 [MEDIUM] CWE-125 CVE-2026-81978: Acrobat Reader is affected by an out-of-bounds read vulnerability that could lead to disclosure of s
Acrobat Reader is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
nvd
CVE-2021-21057P4MEDIUMCVSS 6.6≥ 17.0, ≤ 17.011.30188≥ 20.0, ≤ 20.001.300183+1 more2021-02-11
CVE-2021-21057 [MEDIUM] CWE-476 CVE-2021-21057: Acrobat Reader DC versions versions 2020.013.20074 (and earlier), 2020.001.30018 (and earlier) and 2
Acrobat Reader DC versions versions 2020.013.20074 (and earlier), 2020.001.30018 (and earlier) and 2017.011.30188 (and earlier) are affected by a null pointer dereference vulnerability when parsing a specially crafted PDF file. An unauthenticated attacker could leverage this vulnerability to achieve denial of service in the context of the current us
nvd
CVE-2021-39854P4MEDIUMCVSS 5.5≥ 17.011.30059, ≤ 17.011.30199≥ 20.001.30005, ≤ 20.004.30006+1 more2021-09-29
CVE-2021-39854 [MEDIUM] CWE-476 CVE-2021-39854: Acrobat Reader DC versions 2021.005.20060 (and earlier), 2020.004.30006 (and earlier) and 2017.011.3
Acrobat Reader DC versions 2021.005.20060 (and earlier), 2020.004.30006 (and earlier) and 2017.011.30199 (and earlier) are affected by a Null pointer dereference vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve an application denial-of-service in the context of the current user. Exploitation of this issue requi
nvd
CVE-2021-39853P4MEDIUMCVSS 5.5≥ 20.001.30005, ≤ 20.004.30006≥ unspecified, ≤ DC 2021 July2021-09-29
CVE-2021-39853 [MEDIUM] CWE-476 CVE-2021-39853: Acrobat Reader DC versions 2021.005.20060 (and earlier), 2020.004.30006 (and earlier) and 2017.011.3
Acrobat Reader DC versions 2021.005.20060 (and earlier), 2020.004.30006 (and earlier) and 2017.011.30199 (and earlier) are affected by a Null pointer dereference vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve an application denial-of-service in the context of the current user. Exploitation of this issue requi
nvd
CVE-2015-5583P4MEDIUMCVSS 4.3≥ 10.0, ≤ 10.1.15≥ 11.0.0, ≤ 11.0.122015-10-14
CVE-2015-5583 [MEDIUM] CWE-200 CVE-2015-5583: Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC
Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2015.006.30094, and Acrobat and Acrobat Reader DC Continuous before 2015.009.20069 on Windows and OS X allow attackers to bypass intended sandbox restrictions and obtain sensitive PDF information by launching a print job on a remote printe
nvd