Adobe Acrobat Reader Dc vulnerabilities
1,838 known vulnerabilities affecting adobe/acrobat_reader_dc.
Total CVEs
1,838
CISA KEV
7
actively exploited
Public exploits
30
Exploited in wild
15
Severity breakdown
CRITICAL449HIGH885MEDIUM470LOW34
Vulnerabilities
Page 22 of 92
CVE-2017-16405P3HIGHCVSS 8.8≥ -, ≤ 17.012.20098≥ 15.0, ≤ 15.006.303552017-12-09
CVE-2017-16405 [HIGH] CWE-125 CVE-2017-16405: An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.3
An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versions, and 11.0.22 and earlier versions. This vulnerability occurs as a result of a computation that reads data that is past the end of the target buffer; the computation is part of Acrobat's page
nvd
CVE-2017-16370P3HIGHCVSS 8.8≥ -, ≤ 17.012.20098≥ 15.0, ≤ 15.006.303552017-12-09
CVE-2017-16370 [HIGH] CWE-125 CVE-2017-16370: An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.3
An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versions, and 11.0.22 and earlier versions. This vulnerability occurs because of a computation that reads data that is past the end of the target buffer; the computation is a part of the JavaScript e
nvd
CVE-2017-16401P3HIGHCVSS 8.8≥ -, ≤ 17.012.20098≥ 15.0, ≤ 15.006.303552017-12-09
CVE-2017-16401 [HIGH] CWE-125 CVE-2017-16401: An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.3
An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versions, and 11.0.22 and earlier versions. This vulnerability occurs as a result of a computation that reads data that is past the end of the target buffer; the computation is part of an image conve
nvd
CVE-2017-16420P3HIGHCVSS 8.8≥ -, ≤ 17.012.20098≥ 15.0, ≤ 15.006.303552017-12-09
CVE-2017-16420 [HIGH] CWE-125 CVE-2017-16420: An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.3
An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versions, and 11.0.22 and earlier versions. This vulnerability occurs as a result of a computation that reads data that is past the end of the target buffer; the computation is in the part of the Jav
nvd
CVE-2017-16394P3HIGHCVSS 8.8≥ -, ≤ 17.012.20098≥ 15.0, ≤ 15.006.303552017-12-09
CVE-2017-16394 [HIGH] CWE-125 CVE-2017-16394: An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.3
An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versions, and 11.0.22 and earlier versions. This vulnerability occurs as a result of a computation that reads data that is past the end of the target buffer; the computation is a part of the WebCaptu
nvd
CVE-2017-3119P3HIGHCVSS 8.8≥ 15.000.0000, < 15.006.30355≥ 17.000.0000, < 17.011.30066+1 more2017-08-11
CVE-2017-3119 [HIGH] CWE-119 CVE-2017-3119: Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earl
Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable memory corruption vulnerability in Acrobat/Reader 11.0.19 engine. Successful exploitation could lead to arbitrary code execution.
nvd
CVE-2019-7052P3CRITICALCVSS 9.8≥ 15.006.30060, ≤ 15.006.30464≥ 15.008.20082, ≤ 19.010.20069+1 more2019-05-24
CVE-2019-7052 [CRITICAL] CWE-787 CVE-2019-7052: Adobe Acrobat and Reader versions 2019.010.20069 and earlier, 2019.010.20069 and earlier, 2017.011.3
Adobe Acrobat and Reader versions 2019.010.20069 and earlier, 2019.010.20069 and earlier, 2017.011.30113 and earlier version, and 2015.006.30464 and earlier have an out-of-bounds write vulnerability. Successful exploitation could lead to arbitrary code execution .
nvd
CVE-2019-7037P3CRITICALCVSS 9.8≥ 15.006.30060, ≤ 15.006.30464≥ 15.008.20082, ≤ 19.010.20069+1 more2019-05-24
CVE-2019-7037 [CRITICAL] CWE-787 CVE-2019-7037: Adobe Acrobat and Reader versions 2019.010.20069 and earlier, 2019.010.20069 and earlier, 2017.011.3
Adobe Acrobat and Reader versions 2019.010.20069 and earlier, 2019.010.20069 and earlier, 2017.011.30113 and earlier version, and 2015.006.30464 and earlier have an out-of-bounds write vulnerability. Successful exploitation could lead to arbitrary code execution .
nvd
CVE-2026-81996P3HIGHCVSS 8.8≥ 15.008.20082, < 26.002.219012026-09-08
CVE-2026-81996 [HIGH] CWE-863 CVE-2026-81996: Acrobat Reader is affected by an Incorrect Authorization vulnerability that could result in privileg
Acrobat Reader is affected by an Incorrect Authorization vulnerability that could result in privilege escalation. A low-privileged attacker could exploit this vulnerability to gain elevated access. Exploitation of this issue does not require user interaction. Scope is changed.
nvd
CVE-2021-44707P3HIGHCVSS 7.8≥ 15.008.20082, ≤ 21.007.200992022-01-14
CVE-2021-44707 [HIGH] CWE-787 CVE-2021-44707: Acrobat Reader DC version 21.007.20099 (and earlier), 20.004.30017 (and earlier) and 17.011.30204 (a
Acrobat Reader DC version 21.007.20099 (and earlier), 20.004.30017 (and earlier) and 17.011.30204 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
nvd
CVE-2022-27794P3HIGHCVSS 7.8≥ 15.008.20082, ≤ 22.001.200852022-05-11
CVE-2022-27794 [HIGH] CWE-824 CVE-2022-27794: Acrobat Reader DC versions 22.001.20085 (and earlier), 20.005.3031x (and earlier) and 17.012.30205 (
Acrobat Reader DC versions 22.001.20085 (and earlier), 20.005.3031x (and earlier) and 17.012.30205 (and earlier) is affected by the use of a variable that has not been initialized when processing of embedded fonts, potentially resulting in arbitrary code execution in the context of the current user. Exploitation requires user interaction in that a vic
nvd
CVE-2018-4996P3CRITICALCVSS 9.8≥ 15.006.30060, ≤ 15.006.30417≥ 15.008.20082, ≤ 18.011.20038+1 more2018-07-09
CVE-2018-4996 [CRITICAL] CWE-416 CVE-2018-4996: Adobe Acrobat and Reader versions 2018.011.20038 and earlier, 2017.011.30079 and earlier, and 2015.0
Adobe Acrobat and Reader versions 2018.011.20038 and earlier, 2017.011.30079 and earlier, and 2015.006.30417 and earlier have a Use-after-free vulnerability. Successful exploitation could lead to arbitrary code execution in the context of the current user.
nvd
CVE-2018-12756P3CRITICALCVSS 9.8≥ 15.006.30060, ≤ 15.006.30418≥ 15.008.20082, ≤ 18.011.20040+1 more2018-07-20
CVE-2018-12756 [CRITICAL] CWE-416 CVE-2018-12756: Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418
Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418 and earlier versions have a Use-after-free vulnerability. Successful exploitation could lead to arbitrary code execution in the context of the current user.
nvd
CVE-2018-5011P3CRITICALCVSS 9.8≥ 15.006.30060, ≤ 15.006.30418≥ 15.008.20082, ≤ 18.011.20040+1 more2018-07-20
CVE-2018-5011 [CRITICAL] CWE-416 CVE-2018-5011: Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418
Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418 and earlier versions have a Use-after-free vulnerability. Successful exploitation could lead to arbitrary code execution in the context of the current user.
nvd
CVE-2018-5009P3CRITICALCVSS 9.8≥ 15.006.30060, ≤ 15.006.30418≥ 15.008.20082, ≤ 18.011.20040+1 more2018-07-20
CVE-2018-5009 [CRITICAL] CWE-416 CVE-2018-5009: Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418
Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418 and earlier versions have a Use-after-free vulnerability. Successful exploitation could lead to arbitrary code execution in the context of the current user.
nvd
CVE-2018-12791P3CRITICALCVSS 9.8≥ 15.006.30060, ≤ 15.006.30418≥ 15.008.20082, ≤ 18.011.20040+1 more2018-07-20
CVE-2018-12791 [CRITICAL] CWE-416 CVE-2018-12791: Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418
Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418 and earlier versions have a Use-after-free vulnerability. Successful exploitation could lead to arbitrary code execution in the context of the current user.
nvd
CVE-2018-12792P3CRITICALCVSS 9.8≥ 15.006.30060, ≤ 15.006.30418≥ 15.008.20082, ≤ 18.011.20040+1 more2018-07-20
CVE-2018-12792 [CRITICAL] CWE-416 CVE-2018-12792: Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418
Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418 and earlier versions have a Use-after-free vulnerability. Successful exploitation could lead to arbitrary code execution in the context of the current user.
nvd
CVE-2016-1038P3CRITICALCVSS 10.0≤ 15.006.30121≤ 15.010.200602016-05-11
CVE-2016-1038 [CRITICAL] CWE-284 CVE-2016-1038: Adobe Reader and Acrobat before 11.0.16, Acrobat and Acrobat Reader DC Classic before 15.006.30172,
Adobe Reader and Acrobat before 11.0.16, Acrobat and Acrobat Reader DC Classic before 15.006.30172, and Acrobat and Acrobat Reader DC Continuous before 15.016.20039 on Windows and OS X allow attackers to bypass JavaScript API execution restrictions via unspecified vectors, a different vulnerability than CVE-2016-1039, CVE-2016-1040, CVE-2016-1041, CV
nvd
CVE-2016-1044P3CRITICALCVSS 10.0≤ 15.006.30121≤ 15.010.200602016-05-11
CVE-2016-1044 [CRITICAL] CVE-2016-1044: Adobe Reader and Acrobat before 11.0.16, Acrobat and Acrobat Reader DC Classic before 15.006.30172,
Adobe Reader and Acrobat before 11.0.16, Acrobat and Acrobat Reader DC Classic before 15.006.30172, and Acrobat and Acrobat Reader DC Continuous before 15.016.20039 on Windows and OS X allow attackers to bypass JavaScript API execution restrictions via unspecified vectors, a different vulnerability than CVE-2016-1038, CVE-2016-1039, CVE-2016-1040, CVE-2016-1
nvd
CVE-2014-0566P3CRITICALCVSS 10.0≥ 15.006.30033, < 15.006.30060≥ 15.007.20033, < 15.008.200822014-09-17
CVE-2014-0566 [CRITICAL] CVE-2014-0566: Adobe Reader and Acrobat 10.x before 10.1.12 and 11.x before 11.0.09 on Windows and OS X allow attac
Adobe Reader and Acrobat 10.x before 10.1.12 and 11.x before 11.0.09 on Windows and OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2014-0565.
nvd