cbcvebase.

Adobe Acrobat Reader Dc vulnerabilities

1,838 known vulnerabilities affecting adobe/acrobat_reader_dc.

Total CVEs
1,838
CISA KEV
7
actively exploited
Public exploits
30
Exploited in wild
15
Severity breakdown
CRITICAL449HIGH885MEDIUM470LOW34

Vulnerabilities

Page 88 of 92
CVE-2018-15989P4MEDIUMCVSS 5.5≥ 15.006.30060, ≤ 15.006.30457≥ 15.008.20082, ≤ 19.008.20081+4 more2019-01-18
CVE-2018-15989 [MEDIUM] CWE-125 CVE-2018-15989: Adobe Acrobat and Reader versions 2019.008.20081 and earlier, 2019.008.20080 and earlier, 2019.008.2 Adobe Acrobat and Reader versions 2019.008.20081 and earlier, 2019.008.20080 and earlier, 2019.008.20081 and earlier, 2017.011.30106 and earlier version, 2017.011.30105 and earlier version, 2015.006.30457 and earlier, and 2015.006.30456 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure
nvd
CVE-2018-16022P4MEDIUMCVSS 5.5≥ 15.006.30060, ≤ 15.006.30457≥ 15.008.20082, ≤ 19.008.20081+4 more2019-01-18
CVE-2018-16022 [MEDIUM] CWE-125 CVE-2018-16022: Adobe Acrobat and Reader versions 2019.008.20081 and earlier, 2019.008.20080 and earlier, 2019.008.2 Adobe Acrobat and Reader versions 2019.008.20081 and earlier, 2019.008.20080 and earlier, 2019.008.20081 and earlier, 2017.011.30106 and earlier version, 2017.011.30105 and earlier version, 2015.006.30457 and earlier, and 2015.006.30456 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure
nvd
CVE-2018-19704P4MEDIUMCVSS 5.5≥ 15.006.30060, ≤ 15.006.30457≥ 15.008.20082, ≤ 19.008.20081+4 more2019-01-18
CVE-2018-19704 [MEDIUM] CWE-125 CVE-2018-19704: Adobe Acrobat and Reader versions 2019.008.20081 and earlier, 2019.008.20080 and earlier, 2019.008.2 Adobe Acrobat and Reader versions 2019.008.20081 and earlier, 2019.008.20080 and earlier, 2019.008.20081 and earlier, 2017.011.30106 and earlier version, 2017.011.30105 and earlier version, 2015.006.30457 and earlier, and 2015.006.30456 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure
nvd
CVE-2020-9598P4MEDIUMCVSS 5.5≥ 15.006.30060, < 15.006.30518≥ 15.008.20082, < 20.006.20042+1 more2020-06-25
CVE-2020-9598 [MEDIUM] CWE-119 CVE-2020-9598: Adobe Acrobat and Reader versions 2020.006.20042 and earlier, 2017.011.30166 and earlier, 2017.011.3 Adobe Acrobat and Reader versions 2020.006.20042 and earlier, 2017.011.30166 and earlier, 2017.011.30166 and earlier, and 2015.006.30518 and earlier have an invalid memory access vulnerability. Successful exploitation could lead to information disclosure.
nvd
CVE-2020-9595P4MEDIUMCVSS 5.5≥ 15.006.30060, < 15.006.30518≥ 15.008.20082, < 20.006.20042+1 more2020-06-25
CVE-2020-9595 [MEDIUM] CWE-119 CVE-2020-9595: Adobe Acrobat and Reader versions 2020.006.20042 and earlier, 2017.011.30166 and earlier, 2017.011.3 Adobe Acrobat and Reader versions 2020.006.20042 and earlier, 2017.011.30166 and earlier, 2017.011.30166 and earlier, and 2015.006.30518 and earlier have an invalid memory access vulnerability. Successful exploitation could lead to information disclosure.
nvd
CVE-2020-9593P4MEDIUMCVSS 5.5≥ 15.006.30060, < 15.006.30518≥ 15.008.20082, < 20.006.20042+1 more2020-06-25
CVE-2020-9593 [MEDIUM] CWE-119 CVE-2020-9593: Adobe Acrobat and Reader versions 2020.006.20042 and earlier, 2017.011.30166 and earlier, 2017.011.3 Adobe Acrobat and Reader versions 2020.006.20042 and earlier, 2017.011.30166 and earlier, 2017.011.30166 and earlier, and 2015.006.30518 and earlier have an invalid memory access vulnerability. Successful exploitation could lead to information disclosure.
nvd
CVE-2021-44713P4MEDIUMCVSS 5.5≥ 15.008.20082, ≤ 21.007.200992022-01-14
CVE-2021-44713 [MEDIUM] CWE-416 CVE-2021-44713: Acrobat Reader DC version 21.007.20099 (and earlier), 20.004.30017 (and earlier) and 17.011.30204 (a Acrobat Reader DC version 21.007.20099 (and earlier), 20.004.30017 (and earlier) and 17.011.30204 (and earlier) are affected by a use-after-free vulnerability in the processing of Format event actions that could result in application denial of service. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
nvd
CVE-2019-8251P4MEDIUMCVSS 5.5≥ 15.006.30060, ≤ 15.006.30498≥ 15.008.20082, ≤ 19.012.20035+4 more2020-07-06
CVE-2019-8251 [MEDIUM] CWE-843 CVE-2019-8251: Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.3 Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and earlier, 2015.006.30497 and earlier, and 2015.006.30498 and earlier have a type confusion vulnerability. Successful exploitation could lead to information disclosure.
nvd
CVE-2019-8252P4MEDIUMCVSS 5.5≥ 15.006.30060, ≤ 15.006.30498≥ 15.008.20082, ≤ 19.012.20035+4 more2020-07-06
CVE-2019-8252 [MEDIUM] CWE-843 CVE-2019-8252: Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.3 Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and earlier, 2015.006.30497 and earlier, and 2015.006.30498 and earlier have a type confusion vulnerability. Successful exploitation could lead to information disclosure.
nvd
CVE-2021-39852P4MEDIUMCVSS 5.5≥ 15.008.20082, ≤ 21.005.20058≥ 15.008.20082, ≤ 21.005.200602021-09-29
CVE-2021-39852 [MEDIUM] CWE-476 CVE-2021-39852: Acrobat Reader DC versions 2021.005.20060 (and earlier), 2020.004.30006 (and earlier) and 2017.011.3 Acrobat Reader DC versions 2021.005.20060 (and earlier), 2020.004.30006 (and earlier) and 2017.011.30199 (and earlier) are affected by a Null pointer dereference vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve an application denial-of-service in the context of the current user. Exploitation of this issue requi
nvd
CVE-2021-39851P4MEDIUMCVSS 5.5≥ 15.008.20082, ≤ 21.005.20058≥ 15.008.20082, ≤ 21.005.200602021-09-29
CVE-2021-39851 [MEDIUM] CWE-476 CVE-2021-39851: Acrobat Reader DC versions 2021.005.20060 (and earlier), 2020.004.30006 (and earlier) and 2017.011.3 Acrobat Reader DC versions 2021.005.20060 (and earlier), 2020.004.30006 (and earlier) and 2017.011.30199 (and earlier) are affected by a Null pointer dereference vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve an application denial-of-service in the context of the current user. Exploitation of this issue requi
nvd
CVE-2021-39849P4MEDIUMCVSS 5.5≥ 15.008.20082, ≤ 21.005.20058≥ 15.008.20082, ≤ 21.005.200602021-09-29
CVE-2021-39849 [MEDIUM] CWE-476 CVE-2021-39849: Acrobat Reader DC versions 2021.005.20060 (and earlier), 2020.004.30006 (and earlier) and 2017.011.3 Acrobat Reader DC versions 2021.005.20060 (and earlier), 2020.004.30006 (and earlier) and 2017.011.30199 (and earlier) are affected by a Null pointer dereference vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve an application denial-of-service in the context of the current user. Exploitation of this issue requi
nvd
CVE-2021-39850P4MEDIUMCVSS 5.5≥ 15.008.20082, ≤ 21.005.20058≥ 15.008.20082, ≤ 21.005.200602021-09-29
CVE-2021-39850 [MEDIUM] CWE-476 CVE-2021-39850: Acrobat Reader DC versions 2021.005.20060 (and earlier), 2020.004.30006 (and earlier) and 2017.011.3 Acrobat Reader DC versions 2021.005.20060 (and earlier), 2020.004.30006 (and earlier) and 2017.011.30199 (and earlier) are affected by a Null pointer dereference vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve an application denial-of-service in the context of the current user. Exploitation of this issue requi
nvd
CVE-2021-35985P4MEDIUMCVSS 5.5≥ 15.008.20082, ≤ 21.005.20054≥ 17.011.30059, ≤ 17.011.30197+1 more2021-08-20
CVE-2021-35985 [MEDIUM] CWE-476 CVE-2021-35985: Acrobat Reader DC versions 2021.005.20054 (and earlier), 2020.004.30005 (and earlier) and 2017.011.3 Acrobat Reader DC versions 2021.005.20054 (and earlier), 2020.004.30005 (and earlier) and 2017.011.30197 (and earlier) are affected by a Null pointer dereference vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve an application denial-of-service in the context of the current user. Exploitation of this issue requi
nvd
CVE-2015-6704P4MEDIUMCVSS 4.3≥ 15.006.30060, < 15.006.30094≥ 15.008.20082, < 15.009.200692015-10-14
CVE-2015-6704 [MEDIUM] CVE-2015-6704: The animations property implementation in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x befo The animations property implementation in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2015.006.30094, and Acrobat and Acrobat Reader DC Continuous before 2015.009.20069 on Windows and OS X allows attackers to obtain sensitive information from process memory via a function call, a different
nvd
CVE-2015-6701P4MEDIUMCVSS 4.3≥ 15.006.30060, < 15.006.30094≥ 15.008.20082, < 15.009.200692015-10-14
CVE-2015-6701 [MEDIUM] CVE-2015-6701: The ambientIlluminationColor property implementation in Adobe Reader and Acrobat 10.x before 10.1.16 The ambientIlluminationColor property implementation in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2015.006.30094, and Acrobat and Acrobat Reader DC Continuous before 2015.009.20069 on Windows and OS X allows attackers to obtain sensitive information from process memory via a function cal
nvd
CVE-2015-6702P4MEDIUMCVSS 4.3≥ 15.006.30060, < 15.006.30094≥ 15.008.20082, < 15.009.200692015-10-14
CVE-2015-6702 [MEDIUM] CVE-2015-6702: The createSquareMesh function in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.1 The createSquareMesh function in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2015.006.30094, and Acrobat and Acrobat Reader DC Continuous before 2015.009.20069 on Windows and OS X allows attackers to obtain sensitive information from process memory via invalid arguments, a different vulner
nvd
CVE-2015-6699P4MEDIUMCVSS 4.3≥ 15.006.30060, < 15.006.30094≥ 15.008.20082, < 15.009.200692015-10-14
CVE-2015-6699 [MEDIUM] CVE-2015-6699: The addForegroundSprite function in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11. The addForegroundSprite function in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2015.006.30094, and Acrobat and Acrobat Reader DC Continuous before 2015.009.20069 on Windows and OS X allows attackers to obtain sensitive information from process memory via invalid arguments, a different vul
nvd
CVE-2015-6703P4MEDIUMCVSS 4.3≥ 15.006.30060, < 15.006.30094≥ 15.008.20082, < 15.009.200692015-10-14
CVE-2015-6703 [MEDIUM] CVE-2015-6703: The loadFlashMovie function in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, The loadFlashMovie function in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2015.006.30094, and Acrobat and Acrobat Reader DC Continuous before 2015.009.20069 on Windows and OS X allows attackers to obtain sensitive information from process memory via invalid arguments, a different vulnerab
nvd
CVE-2021-39859P4MEDIUMCVSS 5.5≥ 15.007.20033, ≤ 21.005.20060≥ 15.007.20033, ≤ 21.005.200582023-09-06
CVE-2021-39859 [MEDIUM] CWE-416 CVE-2021-39859: Acrobat Reader DC versions 2021.005.20060 (and earlier), 2020.004.30006 (and earlier) and 2017.011.3 Acrobat Reader DC versions 2021.005.20060 (and earlier), 2020.004.30006 (and earlier) and 2017.011.30199 (and earlier) are affected by a Use After Free vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction
nvd
← Previous88 / 92Next →
Adobe Acrobat Reader Dc vulnerabilities | cvebase