Acrobat vulnerabilities

229 known vulnerabilities in Acrobat from Adobe. 228 are rated high or critical, and 24 have been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.3 High severity

  Acrobat Reader: Out-of-bounds Write

  CVE-2022-27787May 11, 2022AdobeEPSS 10.3%

  Acrobat Reader DC versions 22.001.20085 (and earlier), 20.005.3031x (and earlier) and 17.012.30205 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation

• 9.3 High severity

  Acrobat Reader: Use After Free

  CVE-2022-27786May 11, 2022AdobeEPSS 12.1%

  Acrobat Reader DC versions 22.001.20085 (and earlier), 20.005.3031x (and earlier) and 17.012.30205 (and earlier) are affected by a use-after-free vulnerability in the processing of fonts that could result in arbitrary code execution in the context of the curre

• 9.3 High severity

  Acrobat Reader: Use After Free

  CVE-2022-27785May 11, 2022AdobeEPSS 12.5%

  Acrobat Reader DC versions 22.001.20085 (and earlier), 20.005.3031x (and earlier) and 17.012.30205 (and earlier) are affected by a use-after-free vulnerability in the processing of fonts that could result in arbitrary code execution in the context of the curre

• 9.3 High severity

  Acrobat Reader: Use After Free

  CVE-2022-24104May 11, 2022AdobeEPSS 11.1%

  Acrobat Reader DC versions 20.001.20085 (and earlier), 20.005.3031x (and earlier) and 17.012.30205 (and earlier) are affected by a use-after-free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of th

• 9.3 High severity

  Acrobat Reader: Use After Free

  CVE-2022-24103May 11, 2022AdobeEPSS 3.69%

  Acrobat Reader DC versions 20.001.20085 (and earlier), 20.005.3031x (and earlier) and 17.012.30205 (and earlier) are affected by a use-after-free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of th

• 7.8 High severity

  Acrobat Reader: Use After Free

  CVE-2022-24102May 11, 2022AdobeEPSS 12.6%

  Acrobat Reader DC versions 20.001.20085 (and earlier), 20.005.3031x (and earlier) and 17.012.30205 (and earlier) are affected by a use-after-free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of th

• 9.3 High severity

  Acrobat Reader: Out-of-bounds Write

  CVE-2022-24092Mar 18, 2022AdobeEPSS 4.5%

  Acrobat Reader DC version 21.007.20099 (and earlier), 20.004.30017 (and earlier) and 17.011.30204 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation

• 7.8 High severity

  Acrobat Reader: Out-of-bounds Write

  CVE-2022-24091Mar 18, 2022AdobeEPSS 4.1%

  Acrobat Reader DC version 21.007.20099 (and earlier), 20.004.30017 (and earlier) and 17.011.30204 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation

• 8.8 High severity

  Adobe Acrobat and Reader Use-After-Free Exploited

  CVE-2021-28550Sep 2, 2021AdobeEPSS 52.1%

  Acrobat Reader DC versions versions 2021.001.20150 (and earlier), 2020.001.30020 (and earlier) and 2017.011.30194 (and earlier) are affected by a Use After Free vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary c

• 6.8 Medium severity

  Adobe Acrobat and Reader Heap-based Buffer Overflow Exploited

  CVE-2021-21017Feb 11, 2021AdobeEPSS 86.3%

  Acrobat Reader DC versions versions 2020.013.20074 (and earlier), 2020.001.30018 (and earlier) and 2017.011.30188 (and earlier) are affected by a heap-based buffer overflow vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve

• 9.8 Critical severity

  Adobe Reader and Acrobat Sandbox Bypass Exploited

  CVE-2014-0546Aug 12, 2014AdobeEPSS 22.3%

  Adobe Reader and Acrobat 10.x before 10.1.11 and 11.x before 11.0.08 on Windows allow attackers to bypass a sandbox protection mechanism, and consequently execute native code in a privileged context, via unspecified vectors.

• 10.0 High severity

  Adobe Reader and Acrobat Use-After-Free Exploited

  CVE-2014-0496Jan 15, 2014AdobeEPSS 40%

  Use-after-free vulnerability in Adobe Reader and Acrobat 10.x before 10.1.9 and 11.x before 11.0.06 on Windows and Mac OS X allows attackers to execute arbitrary code via unspecified vectors.

• 9.8 Critical severity

  Adobe Reader and Acrobat Memory Corruption Exploited

  CVE-2013-3346Aug 30, 2013AdobeEPSS 78.9%

  Adobe Reader and Acrobat 9.x before 9.5.5, 10.x before 10.1.7, and 11.x before 11.0.03 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2013-2718, CVE-2013-27

• 9.8 Critical severity

  Adobe Reader and Acrobat Arbitrary Integer Overflow Exploited

  CVE-2013-2729May 16, 2013AdobeEPSS 66.6%

  Integer overflow in Adobe Reader and Acrobat 9.x before 9.5.5, 10.x before 10.1.7, and 11.x before 11.0.03 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2013-2727.

• 7.8 High severity

  Adobe Reader Buffer Overflow Exploited

  CVE-2013-0641Feb 14, 2013AdobeEPSS 32.3%

  Buffer overflow in Adobe Reader and Acrobat 9.x before 9.5.4, 10.x before 10.1.6, and 11.x before 11.0.02 allows remote attackers to execute arbitrary code via a crafted PDF document, as exploited in the wild in February 2013.

• 7.8 High severity

  Adobe Reader and Acrobat Memory Corruption Exploited

  CVE-2013-0640Feb 14, 2013AdobeEPSS 86.9%

  Adobe Reader and Acrobat 9.x before 9.5.4, 10.x before 10.1.6, and 11.x before 11.0.02 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted PDF document, as exploited in the wild in February 2013.

• 9.8 Critical severity

  Adobe Reader and Acrobat Universal 3D Memory Corruption Exploited

  CVE-2011-2462Dec 7, 2011AdobeEPSS 88.6%

  Unspecified vulnerability in the U3D component in Adobe Reader and Acrobat 10.1.1 and earlier on Windows and Mac OS X, and Adobe Reader 9.x through 9.4.6 on UNIX, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption

• 8.8 High severity

  Adobe Flash Player Remote Code Execution Exploited

  CVE-2011-0611Apr 13, 2011AdobeEPSS 99.4%

  Adobe Flash Player before 10.2.154.27 on Windows, Mac OS X, Linux, and Solaris and 10.2.156.12 and earlier on Android; Adobe AIR before 2.6.19140; and Authplay.dll (aka AuthPlayLib.bundle) in Adobe Reader 9.x before 9.4.4 and 10.x through 10.0.1 on Windows, Ad

• 7.8 High severity

  Adobe Flash Player Unspecified Exploited

  CVE-2011-0609Mar 15, 2011AdobeEPSS 63.5%

  Unspecified vulnerability in Adobe Flash Player 10.2.154.13 and earlier on Windows, Mac OS X, Linux, and Solaris; 10.1.106.16 and earlier on Android; Adobe AIR 2.5.1 and earlier; and Authplay.dll (aka AuthPlayLib.bundle) in Adobe Reader and Acrobat 9.x through

• 7.3 High severity

  Adobe Acrobat and Reader Stack-Based Buffer Overflow Exploited

  CVE-2010-2883Sep 9, 2010AdobeEPSS 81.4%

  Stack-based buffer overflow in CoolType.dll in Adobe Reader and Acrobat 9.x before 9.4, and 8.x before 8.2.5 on Windows and Mac OS X, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a PDF document with a l

• 7.8 High severity

  Adobe Flash Player Memory Corruption Exploited

  CVE-2010-1297Jun 8, 2010AdobeEPSS 82.5%

  Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64; Adobe AIR before 2.0.2.12610; and Adobe Reader and Acrobat 9.x before 9.3.3, and 8.x before 8.2.3 on Windows and Mac OS X, allow remote attackers to execute arbitrary code or cause a denial of ser

• 7.8 High severity

  Adobe Reader and Acrobat Arbitrary Code Execution Exploited

  CVE-2010-0188Feb 22, 2010AdobeEPSS 88.1%

  Unspecified vulnerability in Adobe Reader and Acrobat 8.x before 8.2.1 and 9.x before 9.3.1 allows attackers to cause a denial of service (application crash) or possibly execute arbitrary code via unknown vectors.

• 8.8 High severity

  Adobe Acrobat and Reader Universal 3D Remote Code Execution Exploited

  CVE-2009-3953Jan 13, 2010AdobeEPSS 83.2%

  The U3D implementation in Adobe Reader and Acrobat 9.x before 9.3, 8.x before 8.2 on Windows and Mac OS X, and 7.x before 7.1.4 allows remote attackers to execute arbitrary code via malformed U3D data in a PDF document, related to a CLODProgressiveMeshDeclarat

• 7.8 High severity

  Adobe Acrobat and Reader Use-After-Free Exploited

  CVE-2009-4324Dec 15, 2009AdobeEPSS 81.9%

  Use-after-free vulnerability in the Doc.media.newPlayer method in Multimedia.api in Adobe Reader and Acrobat 9.x before 9.3, and 8.x before 8.2 on Windows and Mac OS X, allows remote attackers to execute arbitrary code via a crafted PDF file using ZLib compres

• 9.3 High severity

  Adobe Acrobat and Reader Heap-Based Buffer Overflow Exploited

  CVE-2009-3459Oct 13, 2009AdobeEPSS 86.5%

  Heap-based buffer overflow in Adobe Reader and Acrobat 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2 allows remote attackers to execute arbitrary code via a crafted PDF file that triggers memory corruption, as exploited in the wild in October 2009. NO

• 7.8 High severity

  Adobe Acrobat and Reader, Flash Player Unspecified Exploited

  CVE-2009-1862Jul 23, 2009AdobeEPSS 21.2%

  Unspecified vulnerability in Adobe Reader and Acrobat 9.x through 9.1.2, and Adobe Flash Player 9.x through 9.0.159.0 and 10.x through 10.0.22.87, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via (1) a craf

• 7.8 High severity

  Adobe Reader and Acrobat Input Validation Exploited

  CVE-2008-2992Nov 4, 2008AdobeEPSS 99.8%

  Stack-based buffer overflow in Adobe Acrobat and Reader 8.1.2 and earlier allows remote attackers to execute arbitrary code via a PDF file that calls the util.printf JavaScript function with a crafted format string argument, a related issue to CVE-2008-1104.

• 7.8 High severity

  Adobe Acrobat and Reader Buffer Overflow Exploited

  CVE-2007-5659Feb 12, 2008AdobeEPSS 87.3%

  Multiple buffer overflows in Adobe Reader and Acrobat 8.1.1 and earlier allow remote attackers to execute arbitrary code via a PDF file with long arguments to unspecified JavaScript methods. NOTE: this issue might be subsumed by CVE-2008-0655.

• 8.8 High severity

  Adobe Acrobat and Reader Unspecified Exploited

  CVE-2008-0655Feb 7, 2008AdobeEPSS 37.9%

  Multiple unspecified vulnerabilities in Adobe Reader and Acrobat before 8.1.2 have unknown impact and attack vectors.