AR
Product
Acrobat Reader
On CISA KEVExploited in the wildRansomware-linked
1,120
CVEs
21
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 24High 397Medium 79Low 0
Watch
Add Acrobat Reader to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-39383 | 7.8 | Aug 14 | PoC sample of unknown vulnerability detected by EXPMON system Affected: through 24.001.30123 |
| CVE-2024-30279 | 7.8 | May 23 | ZDI-CAN-22887: Adobe Acrobat Reader DC JPEG2000 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability Affected: through 24.002.20736 |
| CVE-2024-30280 | 7.8 | May 23 | ZDI-CAN-22867: Adobe Acrobat Pro DC AcroForm Annotation Out-Of-Bounds Read Remote Code Execution Vulnerability Affected: through 24.002.20736 |
| CVE-2024-34100 | 7.8 | May 15 | Use-After-Free vulnerability in the latest Adobe Acrobat Reader DC when open malicious PDF file Affected: through 24.002.20736 |
| CVE-2024-30284 | 7.8 | May 15 | ZDI-CAN-23466: Adobe Acrobat Reader DC Annotation Use-After-Free Remote Code Execution Vulnerability Affected: through 24.002.20736 |
| CVE-2024-34098 | 7.8 | May 15 | ZDI-CAN-XXXX: [Pwn2Own] Acrobat sandbox bypass part 1 of 2 Affected: through 24.002.20736 |
| CVE-2024-34095 | 7.8 | May 15 | ZDI-CAN-23475: Adobe Acrobat Reader DC Annotation Use-After-Free Remote Code Execution Vulnerability Affected: through 24.002.20736 |
| CVE-2024-34099 | 7.8 | May 15 | ZDI-CAN-XXXX: [Pwn2Own] Acrobat sandbox bypass part 2 of 2 Affected: through 24.002.20736 |
| CVE-2024-34096 | 7.8 | May 15 | ZDI-CAN-23472: Adobe Acrobat Reader DC Annotation Use-After-Free Remote Code Execution Vulnerability Affected: through 24.002.20736 |
| CVE-2024-34097 | 7.8 | May 15 | ZDI-CAN-23473: Adobe Acrobat Reader DC Annotation Use-After-Free Remote Code Execution Vulnerability Affected: through 24.002.20736 |
| CVE-2024-34094 | 7.8 | May 15 | ZDI-CAN-23474: Adobe Acrobat Reader DC Annotation Use-After-Free Remote Code Execution Vulnerability Affected: through 24.002.20736 |
| CVE-2024-30310 | 7.8 | May 15 | ZDI-CAN-23327: Adobe Acrobat Reader DC PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability Affected: through 24.002.20736 |
| CVE-2024-30301 | 7.8 | May 2 | ZDI-CAN-23042: Adobe Acrobat Reader DC AcroForm Use-After-Free Remote Code Execution Vulnerability Affected: through 23.008.20470 |
| CVE-2024-30303 | 7.8 | May 2 | ZDI-CAN-23044: Adobe Acrobat Reader DC AcroForm Use-After-Free Remote Code Execution Vulnerability Affected: through 23.008.20470 |
| CVE-2024-30305 | 7.8 | May 2 | ZDI-CAN-23043: Adobe Acrobat Reader DC AcroForm Use-After-Free Remote Code Execution Vulnerability Affected: through 23.008.20470 |
| CVE-2024-30306 | 7.8 | May 2 | ZDI-CAN-23106: Adobe Acrobat Reader DC AcroForm Out-Of-Bounds Read Remote Code Execution Vulnerability Affected: through 23.008.20470 |
| CVE-2024-30304 | 7.8 | May 2 | ZDI-CAN-23040: Adobe Acrobat Reader DC Annotation Use-After-Free Remote Code Execution Vulnerability Affected: through 23.008.20470 |
| CVE-2024-20765 | 7.8 | Feb 29 | ZDI-CAN-22674: Adobe Acrobat Reader DC PDF File Parsing Use-After-Free Remote Code Execution Vulnerability Affected: through 23.008.20470 |
| CVE-2024-20726 | 7.8 | Feb 15 | [TianfuCup] JP2K Image Parsing Out-Of-Bounds Write Affected: through 23.008.20470 |
| CVE-2024-20730 | 7.8 | Feb 15 | TALOS-2023-1906 - Adobe Acrobat Reader Font CPAL integer overflow vulnerability Affected: through 23.008.20470 |
| CVE-2024-20731 | 7.8 | Feb 15 | TALOS-2023-1901 - Adobe Acrobat Reader FileAttachment PDAnnot destroy use-after-free vulnerability Affected: through 23.008.20470 |
| CVE-2024-20727 | 7.8 | Feb 15 | [TianfuCup] out-of-bounds access vulnerability when parsing jpeg2000 Affected: through 23.008.20470 |
| CVE-2024-20728 | 7.8 | Feb 15 | ZDI-CAN-22727: Adobe Acrobat Pro DC Annotation Out-Of-Bounds Write Remote Code Execution Vulnerability Affected: through 23.008.20470 |
| CVE-2024-20729 | 7.8 | Feb 15 | TALOS-2023-1890 - Adobe Acrobat Reader Annot3D object zoom event use-after-free vulnerability Affected: through 23.008.20470 |
| CVE-2023-44359 | 7.8 | Nov 16 | ZDI-CAN-21936: Adobe Acrobat Reader DC Font Parsing Use-After-Free Remote Code Execution Vulnerability Affected: through 23.006.20360 |
| CVE-2023-44366 | 7.8 | Nov 16 | ZDI-CAN-21928: Adobe Acrobat Reader DC Font Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability Affected: through 23.006.20360 |
| CVE-2023-44338 | 7.8 | Nov 16 | ZDI-CAN-21493: Adobe Acrobat Reader DC Annotation Out-Of-Bounds Read Remote Code Execution Vulnerability Affected: through 23.006.20360 |
| CVE-2023-44371 | 7.8 | Nov 16 | ZDI-CAN-21998: Adobe Acrobat Reader DC Font Parsing Use-After-Free Remote Code Execution Vulnerability Affected: through 23.006.20360 |
| CVE-2023-44336 | 7.8 | Nov 16 | TALOS-2023-1794 - Adobe Acrobat Reader Thermometer use-after-free vulnerability Affected: through 23.006.20360 |
| CVE-2023-44365 | 7.8 | Nov 16 | ZDI-CAN-21931: Adobe Acrobat Reader DC Font Parsing Uninitialized Variable Remote Code Execution Vulnerability Affected: through 23.006.20360 |
| CVE-2023-44367 | 7.8 | Nov 16 | ZDI-CAN-21929: Adobe Acrobat Reader DC Font Parsing Use-After-Free Remote Code Execution Vulnerability Affected: through 23.006.20360 |
| CVE-2023-44337 | 7.8 | Nov 16 | ZDI-CAN-21509: Adobe Acrobat Reader DC Font Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability Affected: through 23.006.20360 |
| CVE-2023-44372 | 7.8 | Nov 16 | TALOS-2023-1842 - Adobe Acrobat Reader U3D page event use-after-free vulnerability Affected: through 23.006.20360 |
| CVE-2019-16471 | 7.8 | Sep 11 | Use-After-Free in app.measureDialog - Tianfu Cup Affected: through 2019.021.20056 |
| CVE-2019-16470 | 7.8 | Sep 11 | CoolType.dll crash - Tianfu Cup Affected: through 2019.021.20056 |
| CVE-2022-34227 | 7.8 | Sep 11 | Adobe Acrobat Reader DC AcroForm value Use-After-Free Remote Code Execution Vulnerability Affected: through 17.012.30229 |
| CVE-2022-34224 | 7.8 | Sep 11 | Adobe Acrobat Reader DC AcroForm setItems Use-After-Free Remote Code Execution Vulnerability Affected: through 17.012.30229 |
| CVE-2021-21088 | 7.8 | Sep 6 | Adobe Acrobat Pro DC Use-After-Free Remote Code Execution Vulnerability Affected: through 2017.011.30188 |
| CVE-2021-35980 | 7.8 | Sep 6 | Adobe Acrobat Reader SpellDictionaryExport Path Traversal Remote Code Execution Vulnerability Affected: through 2021.005.20054 |
| CVE-2021-28644 | 7.8 | Sep 6 | Adobe Acrobat SpellDictionaryCreate Path Traversal Remote Code Execution Vulnerability Affected: through 2021.005.20054 |
| CVE-2023-38246 | 7.8 | Aug 10 | Adobe Acrobat Reader DC ActiveX Control (AxAcroPDFLib.AxAcroPDF) stack-based stale pointer vulnerability Affected: through 23.003.20244 |
| CVE-2023-29320 | 7.8 | Aug 10 | ZDI-CAN-20712: Adobe Acrobat Blacklist Bypass Design flaw Affected: through 23.003.20244 |
| CVE-2023-38226 | 7.8 | Aug 10 | ZDI-CAN-21240: Adobe Acrobat Reader DC Font Parsing Uninitialized Variable Remote Code Execution Vulnerability Affected: through 23.003.20244 |
| CVE-2023-38228 | 7.8 | Aug 10 | ZDI-CAN-21317: Adobe Acrobat Reader DC Font Parsing Use-After-Free Remote Code Execution Vulnerability Affected: through 23.003.20244 |
| CVE-2023-38231 | 7.8 | Aug 10 | ZDI-CAN-21334: Adobe Acrobat Reader DC Font Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability Affected: through 23.003.20244 |
| CVE-2023-38225 | 7.8 | Aug 10 | ZDI-CAN-21118: Adobe Acrobat Reader DC AcroForm Use-After-Free Remote Code Execution Vulnerability Affected: through 23.003.20244 |
| CVE-2023-38229 | 7.8 | Aug 10 | ZDI-CAN-21310: Adobe Acrobat Reader DC Font Parsing Out-Of-Bounds Read Information Disclosure Vulnerability Affected: through 23.003.20244 |
| CVE-2023-38233 | 7.8 | Aug 10 | ZDI-CAN-21337: Adobe Acrobat Reader DC Font Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability Affected: through 23.003.20244 |
| CVE-2023-38222 | 7.8 | Aug 10 | ZDI-CAN-21103: Adobe Acrobat Reader DC AcroForm spawnPageFromTemplate Use-After-Free Remote Code Execution Vulnerability Affected: through 23.003.20244 |
| CVE-2023-38227 | 7.8 | Aug 10 | ZDI-CAN-21241: Adobe Acrobat Reader DC Font Parsing Use-After-Free Remote Code Execution Vulnerability Affected: through 23.003.20244 |
The 500 most important CVEs for this product (exploited first, then by severity)