Acrobat Reader vulnerabilities

211 known vulnerabilities in Acrobat Reader from Adobe. 210 are rated high or critical, and 21 have been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.3 High severity

  Acrobat Reader: Use After Free

  CVE-2022-28238May 11, 2022AdobeEPSS 11.9%

  Acrobat Reader DC versions 22.001.20085 (and earlier), 20.005.3031x (and earlier) and 17.012.30205 (and earlier) are affected by a use-after-free vulnerability in the processing of annotations that could result in arbitrary code execution in the context of the

• 9.3 High severity

  Acrobat Reader: Use After Free

  CVE-2022-28237May 11, 2022AdobeEPSS 4.05%

  Acrobat Reader DC versions 22.001.20085 (and earlier), 20.005.3031x (and earlier) and 17.012.30205 (and earlier) are affected by a use-after-free vulnerability in the processing of annotations that could result in arbitrary code execution in the context of the

• 7.8 High severity

  Acrobat Reader: Out-of-bounds Write

  CVE-2022-28236May 11, 2022AdobeEPSS 11.6%

  Acrobat Reader DC versions 22.001.20085 (and earlier), 20.005.3031x (and earlier) and 17.012.30205 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation

• 9.3 High severity

  Acrobat Reader: Use After Free

  CVE-2022-28235May 11, 2022AdobeEPSS 4.05%

  Acrobat Reader DC versions 22.001.20085 (and earlier), 20.005.3031x (and earlier) and 17.012.30205 (and earlier) are affected by a use-after-free vulnerability in the processing of the acroform event that could result in arbitrary code execution in the context

• 9.3 High severity

  Acrobat Reader: Out-of-bounds Write

  CVE-2022-28234May 11, 2022AdobeEPSS 5.29%

  Acrobat Reader DC versions 22.001.20085 (and earlier), 20.005.3031x (and earlier) and 17.012.30205 (and earlier) is affected by a heap-based buffer overflow vulnerability due to insecure handling of a crafted .pdf file, potentially resulting in arbitrary code

• 9.3 High severity

  Acrobat Reader: Use After Free

  CVE-2022-28233May 11, 2022AdobeEPSS 12.5%

  Acrobat Reader DC versions 22.001.20085 (and earlier), 20.005.3031x (and earlier) and 17.012.30205 (and earlier) are affected by a use-after-free vulnerability in the processing of annotations that could result in arbitrary code execution in the context of the

• 9.3 High severity

  Acrobat Reader: Use After Free

  CVE-2022-28232May 11, 2022AdobeEPSS 12.5%

  Acrobat Reader DC versions 22.001.20085 (and earlier), 20.005.3031x (and earlier) and 17.012.30205 (and earlier) are affected by a use-after-free vulnerability in the processing of the collab object that could result in arbitrary code execution in the context

• 9.3 High severity

  Acrobat Reader: Out-of-bounds Read

  CVE-2022-28231May 11, 2022AdobeEPSS 3.62%

  Acrobat Reader DC versions 22.001.20085 (and earlier), 20.005.3031x (and earlier) and 17.012.30205 (and earlier) is affected by an out-of-bounds read vulnerability when processing a doc object, which could result in a read past the end of an allocated memory s

• 9.3 High severity

  Acrobat Reader: Use After Free

  CVE-2022-28230May 11, 2022AdobeEPSS 12.5%

  Acrobat Reader DC versions 22.001.20085 (and earlier), 20.005.3031x (and earlier) and 17.012.30205 (and earlier) are affected by a use-after-free vulnerability in the processing of the acroform event that could result in arbitrary code execution in the context

• 9.3 High severity

  Acrobat Reader: Use After Free

  CVE-2022-27802May 11, 2022AdobeEPSS 4.05%

  Acrobat Reader DC versions 22.001.20085 (and earlier), 20.005.3031x (and earlier) and 17.012.30205 (and earlier) are affected by a use-after-free vulnerability in the processing of annotations that could result in arbitrary code execution in the context of the

• 9.3 High severity

  Acrobat Reader: Use After Free

  CVE-2022-27801May 11, 2022AdobeEPSS 4.05%

  Acrobat Reader DC versions 22.001.20085 (and earlier), 20.005.3031x (and earlier) and 17.012.30205 (and earlier) are affected by a use-after-free vulnerability in the processing of annotations that could result in arbitrary code execution in the context of the

• 9.3 High severity

  Acrobat Reader: Use After Free

  CVE-2022-27800May 11, 2022AdobeEPSS 4.07%

  Acrobat Reader DC versions 22.001.20085 (and earlier), 20.005.3031x (and earlier) and 17.012.30205 (and earlier) are affected by a use-after-free vulnerability in the processing of annotations that could result in arbitrary code execution in the context of the

• 9.3 High severity

  Acrobat Reader: Use After Free

  CVE-2022-27799May 11, 2022AdobeEPSS 18.8%

  Acrobat Reader DC versions 22.001.20085 (and earlier), 20.005.3031x (and earlier) and 17.012.30205 (and earlier) are affected by a use-after-free vulnerability in the processing of the acroform event that could result in arbitrary code execution in the context

• 9.3 High severity

  Acrobat Reader: Out-of-bounds Write

  CVE-2022-27798May 11, 2022AdobeEPSS 3.19%

  Acrobat Reader DC versions 22.001.20085 (and earlier), 20.005.3031x (and earlier) and 17.012.30205 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation

• 9.3 High severity

  Acrobat Reader: Use After Free

  CVE-2022-27797May 11, 2022AdobeEPSS 4.05%

  Acrobat Reader DC versions 22.001.20085 (and earlier), 20.005.3031x (and earlier) and 17.012.30205 (and earlier) are affected by a use-after-free vulnerability in the processing of annotations that could result in arbitrary code execution in the context of the

• 9.3 High severity

  Acrobat Reader: Use After Free

  CVE-2022-27796May 11, 2022AdobeEPSS 12.5%

  Acrobat Reader DC versions 22.001.20085 (and earlier), 20.005.3031x (and earlier) and 17.012.30205 (and earlier) are affected by a use-after-free vulnerability in the processing of the acroform event that could result in arbitrary code execution in the context

• 9.3 High severity

  Acrobat Reader: Use After Free

  CVE-2022-27795May 11, 2022AdobeEPSS 4.05%

  Acrobat Reader DC versions 22.001.20085 (and earlier), 20.005.3031x (and earlier) and 17.012.30205 (and earlier) are affected by a use-after-free vulnerability in the processing of the acroform event that could result in arbitrary code execution in the context

• 7.8 High severity

  Acrobat Reader: Access of Uninitialized Pointer

  CVE-2022-27794May 11, 2022AdobeEPSS 14.3%

  Acrobat Reader DC versions 22.001.20085 (and earlier), 20.005.3031x (and earlier) and 17.012.30205 (and earlier) is affected by the use of a variable that has not been initialized when processing of embedded fonts, potentially resulting in arbitrary code execu

• 9.3 High severity

  Acrobat Reader: Out-of-bounds Write

  CVE-2022-27793May 11, 2022AdobeEPSS 9.83%

  Acrobat Reader DC versions 22.001.20085 (and earlier), 20.005.3031x (and earlier) and 17.012.30205 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation

• 9.3 High severity

  Acrobat Reader: Out-of-bounds Write

  CVE-2022-27792May 11, 2022AdobeEPSS 9.83%

  Acrobat Reader DC versions 22.001.20085 (and earlier), 20.005.3031x (and earlier) and 17.012.30205 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation

• 9.3 High severity

  Acrobat Reader: Out-of-bounds Write

  CVE-2022-27791May 11, 2022AdobeEPSS 17.8%

  Acrobat Reader DC versions 22.001.20085 (and earlier), 20.005.3031x (and earlier) and 17.012.30205 (and earlier) is affected by a stack-based buffer overflow vulnerability due to insecure processing of a font, potentially resulting in arbitrary code execution

• 9.3 High severity

  Acrobat Reader: Use After Free

  CVE-2022-27790May 11, 2022AdobeEPSS 11.9%

  Acrobat Reader DC versions 22.001.20085 (and earlier), 20.005.3031x (and earlier) and 17.012.30205 (and earlier) are affected by a use-after-free vulnerability in the processing of fonts that could result in arbitrary code execution in the context of the curre

• 9.3 High severity

  Acrobat Reader: Use After Free

  CVE-2022-27789May 11, 2022AdobeEPSS 3.97%

  Acrobat Reader DC versions 22.001.20085 (and earlier), 20.005.3031x (and earlier) and 17.012.30205 (and earlier) are affected by a use-after-free vulnerability in the processing of the acroform event that could result in arbitrary code execution in the context

• 9.3 High severity

  Acrobat Reader: Out-of-bounds Write

  CVE-2022-27788May 11, 2022AdobeEPSS 3.19%

  Acrobat Reader DC versions 22.001.20085 (and earlier), 20.005.3031x (and earlier) and 17.012.30205 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation

• 9.3 High severity

  Acrobat Reader: Out-of-bounds Write

  CVE-2022-27787May 11, 2022AdobeEPSS 10.3%

  Acrobat Reader DC versions 22.001.20085 (and earlier), 20.005.3031x (and earlier) and 17.012.30205 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation

• 9.3 High severity

  Acrobat Reader: Use After Free

  CVE-2022-27786May 11, 2022AdobeEPSS 12.1%

  Acrobat Reader DC versions 22.001.20085 (and earlier), 20.005.3031x (and earlier) and 17.012.30205 (and earlier) are affected by a use-after-free vulnerability in the processing of fonts that could result in arbitrary code execution in the context of the curre

• 9.3 High severity

  Acrobat Reader: Use After Free

  CVE-2022-27785May 11, 2022AdobeEPSS 12.5%

  Acrobat Reader DC versions 22.001.20085 (and earlier), 20.005.3031x (and earlier) and 17.012.30205 (and earlier) are affected by a use-after-free vulnerability in the processing of fonts that could result in arbitrary code execution in the context of the curre

• 9.3 High severity

  Acrobat Reader: Use After Free

  CVE-2022-24104May 11, 2022AdobeEPSS 11.1%

  Acrobat Reader DC versions 20.001.20085 (and earlier), 20.005.3031x (and earlier) and 17.012.30205 (and earlier) are affected by a use-after-free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of th

• 9.3 High severity

  Acrobat Reader: Use After Free

  CVE-2022-24103May 11, 2022AdobeEPSS 3.69%

  Acrobat Reader DC versions 20.001.20085 (and earlier), 20.005.3031x (and earlier) and 17.012.30205 (and earlier) are affected by a use-after-free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of th

• 7.8 High severity

  Acrobat Reader: Use After Free

  CVE-2022-24102May 11, 2022AdobeEPSS 12.6%

  Acrobat Reader DC versions 20.001.20085 (and earlier), 20.005.3031x (and earlier) and 17.012.30205 (and earlier) are affected by a use-after-free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of th

• 9.3 High severity

  Acrobat Reader: Out-of-bounds Write

  CVE-2022-24092Mar 18, 2022AdobeEPSS 4.5%

  Acrobat Reader DC version 21.007.20099 (and earlier), 20.004.30017 (and earlier) and 17.011.30204 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation

• 7.8 High severity

  Acrobat Reader: Out-of-bounds Write

  CVE-2022-24091Mar 18, 2022AdobeEPSS 4.1%

  Acrobat Reader DC version 21.007.20099 (and earlier), 20.004.30017 (and earlier) and 17.011.30204 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation

• 8.8 High severity

  Adobe Acrobat and Reader Use-After-Free Exploited

  CVE-2021-28550Sep 2, 2021AdobeEPSS 52.1%

  Acrobat Reader DC versions versions 2021.001.20150 (and earlier), 2020.001.30020 (and earlier) and 2017.011.30194 (and earlier) are affected by a Use After Free vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary c

• 6.8 Medium severity

  Adobe Acrobat and Reader Heap-based Buffer Overflow Exploited

  CVE-2021-21017Feb 11, 2021AdobeEPSS 86.3%

  Acrobat Reader DC versions versions 2020.013.20074 (and earlier), 2020.001.30018 (and earlier) and 2017.011.30188 (and earlier) are affected by a heap-based buffer overflow vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve

• 9.8 Critical severity

  Adobe Reader and Acrobat Sandbox Bypass Exploited

  CVE-2014-0546Aug 12, 2014AdobeEPSS 22.3%

  Adobe Reader and Acrobat 10.x before 10.1.11 and 11.x before 11.0.08 on Windows allow attackers to bypass a sandbox protection mechanism, and consequently execute native code in a privileged context, via unspecified vectors.

• 9.8 Critical severity

  Adobe Reader and Acrobat Memory Corruption Exploited

  CVE-2013-3346Aug 30, 2013AdobeEPSS 78.9%

  Adobe Reader and Acrobat 9.x before 9.5.5, 10.x before 10.1.7, and 11.x before 11.0.03 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2013-2718, CVE-2013-27

• 9.8 Critical severity

  Adobe Reader and Acrobat Arbitrary Integer Overflow Exploited

  CVE-2013-2729May 16, 2013AdobeEPSS 66.6%

  Integer overflow in Adobe Reader and Acrobat 9.x before 9.5.5, 10.x before 10.1.7, and 11.x before 11.0.03 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2013-2727.

• 7.8 High severity

  Adobe Reader Buffer Overflow Exploited

  CVE-2013-0641Feb 14, 2013AdobeEPSS 32.3%

  Buffer overflow in Adobe Reader and Acrobat 9.x before 9.5.4, 10.x before 10.1.6, and 11.x before 11.0.02 allows remote attackers to execute arbitrary code via a crafted PDF document, as exploited in the wild in February 2013.

• 7.8 High severity

  Adobe Reader and Acrobat Memory Corruption Exploited

  CVE-2013-0640Feb 14, 2013AdobeEPSS 86.9%

  Adobe Reader and Acrobat 9.x before 9.5.4, 10.x before 10.1.6, and 11.x before 11.0.02 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted PDF document, as exploited in the wild in February 2013.

• 9.8 Critical severity

  Adobe Reader and Acrobat Universal 3D Memory Corruption Exploited

  CVE-2011-2462Dec 7, 2011AdobeEPSS 88.6%

  Unspecified vulnerability in the U3D component in Adobe Reader and Acrobat 10.1.1 and earlier on Windows and Mac OS X, and Adobe Reader 9.x through 9.4.6 on UNIX, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption