Adobe Acrobat Reader Dc vulnerabilities
1,838 known vulnerabilities affecting adobe/acrobat_reader_dc.
Total CVEs
1,838
CISA KEV
7
actively exploited
Public exploits
30
Exploited in wild
15
Severity breakdown
CRITICAL449HIGH885MEDIUM470LOW34
Vulnerabilities
Page 61 of 92
CVE-2017-3027P3HIGHCVSS 7.8≤ 15.006.30280≤ 15.023.200702017-04-12
CVE-2017-3027 [HIGH] CWE-416 CVE-2017-3027: Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlie
Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have an exploitable use after free vulnerability in the XFA module, related to the choiceList element. Successful exploitation could lead to arbitrary code execution.
nvd
CVE-2017-2961P3HIGHCVSS 7.8≤ 15.006.30244≤ 15.020.200422017-01-11
CVE-2017-2961 [HIGH] CWE-416 CVE-2017-2961: Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlie
Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have an exploitable use after free vulnerability in the XFA engine, related to validation functionality. Successful exploitation could lead to arbitrary code execution.
nvd
CVE-2017-2951P3HIGHCVSS 7.8≤ 15.006.30244≤ 15.020.200422017-01-11
CVE-2017-2951 [HIGH] CWE-416 CVE-2017-2951: Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlie
Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have an exploitable use after free vulnerability in the XFA engine, related to sub-form functionality. Successful exploitation could lead to arbitrary code execution.
nvd
CVE-2017-2957P3HIGHCVSS 7.8≤ 15.006.30244≤ 15.020.200422017-01-11
CVE-2017-2957 [HIGH] CWE-416 CVE-2017-2957: Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlie
Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have an exploitable use after free vulnerability in the JavaScript engine, related to collaboration functionality. Successful exploitation could lead to arbitrary code execution.
nvd
CVE-2017-2955P3HIGHCVSS 7.8≤ 15.006.30244≤ 15.020.200422017-01-11
CVE-2017-2955 [HIGH] CWE-416 CVE-2017-2955: Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlie
Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have an exploitable use after free vulnerability in the JavaScript engine. Successful exploitation could lead to arbitrary code execution.
nvd
CVE-2017-2956P3HIGHCVSS 7.8≤ 15.006.30244≤ 15.020.200422017-01-11
CVE-2017-2956 [HIGH] CWE-416 CVE-2017-2956: Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlie
Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have an exploitable use after free vulnerability in the JavaScript engine, related to manipulation of the navigation pane. Successful exploitation could lead to arbitrary code execution.
nvd
CVE-2015-6688P3MEDIUMCVSS 6.8≥ 15.006.30060, < 15.006.30094≥ 15.008.20082, < 15.009.200692015-10-14
CVE-2015-6688 [MEDIUM] CVE-2015-6688: Use-after-free vulnerability in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13
Use-after-free vulnerability in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2015.006.30094, and Acrobat and Acrobat Reader DC Continuous before 2015.009.20069 on Windows and OS X allows attackers to execute arbitrary code via a crafted Optional Content Groups (OCG) object in a WillSave doc
nvd
CVE-2017-3030P3HIGHCVSS 7.8≤ 15.006.30280≤ 15.023.200702017-04-12
CVE-2017-3030 [HIGH] CWE-119 CVE-2017-3030: Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlie
Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have an exploitable memory corruption vulnerability in the AES module. Successful exploitation could lead to arbitrary code execution.
nvd
CVE-2017-3019P3HIGHCVSS 7.8≤ 15.006.30280≤ 15.023.200702017-04-12
CVE-2017-3019 [HIGH] CWE-125 CVE-2017-3019: Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlie
Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have an exploitable memory corruption vulnerability in the Product Representation Compact (PRC) format parser. Successful exploitation could lead to arbitrary code execution.
nvd
CVE-2017-3039P3HIGHCVSS 7.8≤ 15.006.30280≤ 15.023.200702017-04-12
CVE-2017-3039 [HIGH] CWE-119 CVE-2017-3039: Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlie
Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have an exploitable memory corruption vulnerability in the PPKLite security handler. Successful exploitation could lead to arbitrary code execution.
nvd
CVE-2017-3040P3HIGHCVSS 7.8≤ 15.006.30280≤ 15.023.200702017-04-12
CVE-2017-3040 [HIGH] CWE-119 CVE-2017-3040: Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlie
Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have an exploitable memory corruption vulnerability in the JBIG2 image compression module. Successful exploitation could lead to arbitrary code execution.
nvd
CVE-2017-3041P3HIGHCVSS 7.8≤ 15.006.30280≤ 15.023.200702017-04-12
CVE-2017-3041 [HIGH] CWE-119 CVE-2017-3041: Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlie
Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have an exploitable memory corruption vulnerability when parsing font data in the MakeAccessible plugin. Successful exploitation could lead to arbitrary code execution.
nvd
CVE-2017-3056P3HIGHCVSS 7.8≤ 15.006.30280≤ 15.023.200702017-04-12
CVE-2017-3056 [HIGH] CWE-119 CVE-2017-3056: Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlie
Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have an exploitable memory corruption vulnerability in the JavaScript engine, related to string manipulation. Successful exploitation could lead to arbitrary code execution.
nvd
CVE-2017-2965P3HIGHCVSS 7.8≤ 15.006.30244≤ 15.020.200422017-01-11
CVE-2017-2965 [HIGH] CWE-119 CVE-2017-2965: Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlie
Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have an exploitable memory corruption vulnerability in the image conversion engine, related to TIFF file parsing. Successful exploitation could lead to arbitrary code execution.
nvd
CVE-2020-24429P3HIGHCVSS 7.8≤ 17.011.30175≤ 20.012.200482020-11-05
CVE-2020-24429 [HIGH] CWE-347 CVE-2020-24429: Acrobat Reader DC versions 2020.012.20048 (and earlier), 2020.001.30005 (and earlier) and 2017.011.3
Acrobat Reader DC versions 2020.012.20048 (and earlier), 2020.001.30005 (and earlier) and 2017.011.30175 (and earlier) for macOS are affected by a signature verification bypass that could result in local privilege escalation. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
nvd
CVE-2017-2943P3HIGHCVSS 7.8≤ 15.006.30244≤ 15.020.200422017-01-11
CVE-2017-2943 [HIGH] CWE-119 CVE-2017-2943: Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlie
Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have an exploitable memory corruption vulnerability when processing tags in TIFF images. Successful exploitation could lead to arbitrary code execution.
nvd
CVE-2017-2940P3HIGHCVSS 7.8≤ 15.006.30244≤ 15.020.200422017-01-11
CVE-2017-2940 [HIGH] CWE-119 CVE-2017-2940: Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlie
Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have an exploitable memory corruption vulnerability when processing JPEG 2000 files. Successful exploitation could lead to arbitrary code execution.
nvd
CVE-2017-2939P3HIGHCVSS 7.8≤ 15.006.30244≤ 15.020.200422017-01-11
CVE-2017-2939 [HIGH] CWE-119 CVE-2017-2939: Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlie
Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have an exploitable memory corruption vulnerability when processing a malformed cross-reference table. Successful exploitation could lead to arbitrary code execution.
nvd
CVE-2017-2972P3HIGHCVSS 7.8≤ 15.006.30244≤ 15.020.200422017-01-24
CVE-2017-2972 [HIGH] CWE-119 CVE-2017-2972: Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlie
Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have an exploitable memory corruption vulnerability in the image conversion module related to JPEG parsing. Successful exploitation could lead to arbitrary code execution.
nvd
CVE-2019-8099P3HIGHCVSS 7.5≥ 15.006.30060, < 15.006.30499≥ 15.008.20082, < 19.012.20036+1 more2019-08-20
CVE-2019-8099 [HIGH] CWE-190 CVE-2019-8099: Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.3
Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and earlier, 2015.006.30497 and earlier, and 2015.006.30498 and earlier have an integer overflow vulnerability. Successful exploitation could lead to information disclosure.
nvd