Adobe Acrobat Reader Dc vulnerabilities

1,779 known vulnerabilities affecting adobe/acrobat_reader_dc.

Total CVEs
1,779
CISA KEV
7
actively exploited
Public exploits
26
Exploited in wild
5
Severity breakdown
CRITICAL449HIGH847MEDIUM451LOW32

Vulnerabilities

Page 61 of 89
CVE-2018-4879CRITICALCVSS 9.8≥ -, ≤ 18.009.20050≥ 15.0, ≤ 15.006.303942018-02-27
CVE-2018-4879 [CRITICAL] CWE-787 CVE-2018-4879: An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 and earlier versions. The vulnerability is caused by the computation that writes data past the end of the intended buffer; the computation is part of the image conversion module that processes Enhanced Metafile Form
nvd
CVE-2018-4895CRITICALCVSS 9.8≥ -, ≤ 18.009.20050≥ 15.0, ≤ 15.006.303942018-02-27
CVE-2018-4895 [CRITICAL] CWE-787 CVE-2018-4895: An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 and earlier versions. The vulnerability is caused by the computation that writes data past the end of the intended buffer; the computation is part of the image conversion engine when processing Enhanced Metafile For
nvd
CVE-2018-4888HIGHCVSS 8.8≥ -, ≤ 18.009.20050≥ 15.0, ≤ 15.006.303942018-02-27
CVE-2018-4888 [HIGH] CWE-416 CVE-2018-4888: An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 and earlier versions. This vulnerability is an instance of a use after free vulnerability. The vulnerability is triggered by a crafted PDF file that can cause a memory access violation exception in the XFA engine becaus
nvd
CVE-2018-4902HIGHCVSS 8.8≥ -, ≤ 18.009.20050≥ 15.0, ≤ 15.006.303942018-02-27
CVE-2018-4902 [HIGH] CWE-416 CVE-2018-4902: An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 and earlier versions. This vulnerability is an instance of a use after free vulnerability in the rendering engine. The vulnerability is triggered by a crafted PDF file containing a video annotation (and corresponding me
nvd
CVE-2018-4901HIGHCVSS 8.8≥ -, ≤ 18.009.20050≥ 15.0, ≤ 15.006.303942018-02-27
CVE-2018-4901 [HIGH] CWE-787 CVE-2018-4901: An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 and earlier versions. The vulnerability is caused by the computation that writes data past the end of the intended buffer; the computation is part of the document identity representation. An attacker can potentially lev
nvd
CVE-2018-4916HIGHCVSS 8.8≥ -, ≤ 18.009.20050≥ 15.0, ≤ 15.006.303942018-02-27
CVE-2018-4916 [HIGH] CWE-787 CVE-2018-4916: An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 and earlier versions. The vulnerability is caused by the computation that writes data past the end of the intended buffer; the computation is part of the image conversion module that handless TIFF data. An attacker can
nvd
CVE-2018-4890HIGHCVSS 8.8≥ -, ≤ 18.009.20050≥ 15.0, ≤ 15.006.303942018-02-27
CVE-2018-4890 [HIGH] CWE-787 CVE-2018-4890: An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 and earlier versions. This vulnerability is an instance of a heap overflow vulnerability in the image conversion engine, when handling JPEG data embedded within an XPS file. A successful attack can lead to code corrupti
nvd
CVE-2018-4913HIGHCVSS 8.8≥ -, ≤ 18.009.20050≥ 15.0, ≤ 15.006.303942018-02-27
CVE-2018-4913 [HIGH] CWE-416 CVE-2018-4913: An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 and earlier versions. This vulnerability is an instance of a use after free vulnerability in the XFA engine, related to DOM manipulation. The vulnerability is triggered by crafted XFA script definitions in a PDF file. S
nvd
CVE-2018-4915HIGHCVSS 8.8≥ -, ≤ 18.009.20050≥ 15.0, ≤ 15.006.303942018-02-27
CVE-2018-4915 [HIGH] CWE-787 CVE-2018-4915: An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 and earlier versions. The vulnerability is caused by the computation that writes data past the end of the intended buffer; the computation is part of the JavaScript API related to color conversion. An attacker can poten
nvd
CVE-2018-4892HIGHCVSS 8.8≥ -, ≤ 18.009.20050≥ 15.0, ≤ 15.006.303942018-02-27
CVE-2018-4892 [HIGH] CWE-416 CVE-2018-4892: An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 and earlier versions. This vulnerability is an instance of a use after free vulnerability in the JBIG2 decoder. The vulnerability is triggered by a crafted PDF file that contains a malformed JBIG2 stream. Successful exp
nvd
CVE-2018-4910HIGHCVSS 8.8≥ -, ≤ 18.009.20050≥ 15.0, ≤ 15.006.303942018-02-27
CVE-2018-4910 [HIGH] CWE-787 CVE-2018-4910: An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 and earlier versions. This vulnerability is an instance of a heap overflow vulnerability in the JavaScript engine. The vulnerability is triggered by a PDF file with crafted JavaScript code that manipulates the optional
nvd
CVE-2018-4898HIGHCVSS 8.8≥ -, ≤ 18.009.20050≥ 15.0, ≤ 15.006.303942018-02-27
CVE-2018-4898 [HIGH] CWE-787 CVE-2018-4898: An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 and earlier versions. The vulnerability is caused by the computation that writes data past the end of the intended buffer; the computation is part of the XPS engine that adds vector graphics and images to a fixed page.
nvd
CVE-2018-4904HIGHCVSS 8.8≥ -, ≤ 18.009.20050≥ 15.0, ≤ 15.006.303942018-02-27
CVE-2018-4904 [HIGH] CWE-787 CVE-2018-4904: An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 and earlier versions. This vulnerability is an instance of a heap overflow vulnerability. The vulnerability is triggered by crafted TIFF data within an XPS file, which causes an out of bounds memory access. An attacker
nvd
CVE-2018-4911HIGHCVSS 8.8≥ -, ≤ 18.009.20050≥ 15.0, ≤ 15.006.303942018-02-27
CVE-2018-4911 [HIGH] CWE-416 CVE-2018-4911: An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 and earlier versions. This vulnerability is an instance of a use after free vulnerability in the JavaScript API related to bookmark functionality. The vulnerability is triggered by crafted JavaScript code embedded withi
nvd
CVE-2018-4886MEDIUMCVSS 6.5≥ 15.0, ≤ 15.006.30394≥ 18.0, ≤ 18.009.200502018-02-27
CVE-2018-4886 [MEDIUM] CWE-125 CVE-2018-4886: An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 and earlier versions. This vulnerability occurs as a result of computation that reads data that is past the end of the target buffer; the computation occurs in the image conversion engine when processing Enhanced Meta
nvd
CVE-2018-4900MEDIUMCVSS 6.5≥ -, ≤ 18.009.20050≥ 15.0, ≤ 15.006.303942018-02-27
CVE-2018-4900 [MEDIUM] CWE-125 CVE-2018-4900: An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 and earlier versions. This vulnerability occurs as a result of computation that reads data that is past the end of the target buffer; the computation is part of JavaScript manipulation of an Annotation object. A succe
nvd
CVE-2018-4889MEDIUMCVSS 6.5≥ -, ≤ 18.009.20050≥ 15.0, ≤ 15.006.303942018-02-27
CVE-2018-4889 [MEDIUM] CWE-125 CVE-2018-4889: An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 and earlier versions. This vulnerability occurs as a result of computation that reads data that is past the end of the target buffer; the computation is part of the XPS image conversion. A successful attack can lead t
nvd
CVE-2018-4896MEDIUMCVSS 6.5≥ -, ≤ 18.009.20050≥ 15.0, ≤ 15.006.303942018-02-27
CVE-2018-4896 [MEDIUM] CWE-125 CVE-2018-4896: An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 and earlier versions. This vulnerability occurs as a result of computation that reads data that is past the end of the target buffer; the computation is part of the image conversion module that handles Enhanced Metafi
nvd
CVE-2018-4909MEDIUMCVSS 6.5≥ -, ≤ 18.009.20050≥ 15.0, ≤ 15.006.303942018-02-27
CVE-2018-4909 [MEDIUM] CWE-125 CVE-2018-4909: An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 and earlier versions. This vulnerability occurs as a result of computation that reads data that is past the end of the target buffer; the computation is part of the image conversion module when processing metadata in
nvd
CVE-2018-4905MEDIUMCVSS 6.5≥ -, ≤ 18.009.20050≥ 15.0, ≤ 15.006.303942018-02-27
CVE-2018-4905 [MEDIUM] CWE-125 CVE-2018-4905: An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 and earlier versions. This vulnerability occurs as a result of computation that reads data that is past the end of the target buffer; the computation is part of TIFF processing within the XPS module. A successful atta
nvd