AR
Product
Acrobat Reader
On CISA KEVExploited in the wildRansomware-linked
1,120
CVEs
21
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 24High 397Medium 79Low 0
Watch
Add Acrobat Reader to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-38223 | 7.8 | Aug 10 | ZDI-CAN-21063: Adobe Acrobat Reader DC Font Parsing Uninitialized Variable Remote Code Execution Vulnerability Affected: through 23.003.20244 |
| CVE-2023-38224 | 7.8 | Aug 10 | ZDI-CAN-21122: Adobe Acrobat Reader DC Annotation Use-After-Free Remote Code Execution Vulnerability Affected: through 23.003.20244 |
| CVE-2023-38234 | 7.8 | Aug 10 | ZDI-CAN-21359: Adobe Acrobat Reader DC Font Parsing Uninitialized Variable Remote Code Execution Vulnerability Affected: through 23.003.20244 |
| CVE-2023-26423 | 7.8 | Apr 12 | ZDI-CAN-20160: Adobe Acrobat Reader DC AcroForm insertItemAt Use-After-Free Remote Code Execution Vulnerability Affected: through 23.001.20093; through 20.005.30441; through None |
| CVE-2023-26421 | 7.8 | Apr 12 | ZDI-CAN-19832: Adobe Acrobat Reader DC Doc Object Integer Underflow Remote Code Execution Vulnerability Affected: through 23.001.20093; through 20.005.30441; through None |
| CVE-2023-26424 | 7.8 | Apr 12 | ZDI-CAN-19833: Adobe Acrobat Reader DC PDF Parsing Use-After-Free Remote Code Execution Vulnerability Affected: through 23.001.20093; through 20.005.30441; through None |
| CVE-2023-26425 | 7.8 | Apr 12 | ZDI-CAN-19854: Adobe Acrobat Reader DC Annotation Out-Of-Bounds Read Remote Code Execution Vulnerability Affected: through 23.001.20093; through 20.005.30441; through None |
| CVE-2023-26407 | 7.8 | Apr 12 | ZDI-CAN-20712: Net.HTTP.request Arbitrary Command Execution Affected: through 23.001.20093; through 20.005.30441; through None |
| CVE-2023-26417 | 7.8 | Apr 12 | ZDI-CAN-20583: Adobe Acrobat Reader DC Popup Use-After-Free Remote Code Execution Vulnerability Affected: through 23.001.20093; through 20.005.30441; through None |
| CVE-2023-26396 | 7.8 | Apr 12 | Adobe Acrobat Reader DC for macOS installer (AcroRdrDC_2200220191_MUI.pkg) contains a local privilege escalation vulnerability. Affected: through 23.001.20093; through 20.005.30441; through None |
| CVE-2023-26418 | 7.8 | Apr 12 | ZDI-CAN-20311: Adobe Acrobat Reader DC AcroForm exportAsFDFStr Use-After-Free Remote Code Execution Vulnerability Affected: through 23.001.20093; through 20.005.30441; through None |
| CVE-2023-26419 | 7.8 | Apr 12 | ZDI-CAN-20274: Adobe Acrobat Reader DC AcroForm removeField Use-After-Free Remote Code Execution Vulnerability Affected: through 23.001.20093; through 20.005.30441; through None |
| CVE-2023-26420 | 7.8 | Apr 12 | ZDI-CAN-20227: Adobe Acrobat Reader DC AcroForm addField Use-After-Free Remote Code Execution Vulnerability Affected: through 23.001.20093; through 20.005.30441; through None |
| CVE-2023-26395 | 7.8 | Apr 12 | Adobe Acrobat parsing PDF Out-of-bounds Write Arbitrary code execution Affected: through 23.001.20093; through 20.005.30441; through None |
| CVE-2023-26406 | 7.8 | Apr 12 | ZDI-CAN-20712: Net.HTTP.request URL restriction bypass Affected: through 23.001.20093; through 20.005.30441; through None |
| CVE-2023-26408 | 7.8 | Apr 12 | ZDI-CAN-20712: AnnotsString Object prototype pollution Restrictions Bypass Vulnerability Affected: through 23.001.20093; through 20.005.30441; through None |
| CVE-2023-26422 | 7.8 | Apr 12 | ZDI-CAN-20176: Adobe Acrobat Reader DC AcroForm deleteItemAt Use-After-Free Remote Code Execution Vulnerability Affected: through 23.001.20093; through 20.005.30441; through None |
| CVE-2023-26405 | 7.8 | Apr 12 | ZDI-CAN-20712: Object Prototype pollution which leads to API Restrictions Bypass Affected: through 23.001.20093; through 20.005.30441; through None |
| CVE-2023-22240 | 7.8 | Jan 27 | ZDI-CAN-19517: Adobe Acrobat Reader DC AcroForm Annotation Out-Of-Bounds Write Remote Code Execution Vulnerability Affected: through 20.005.30418; through 22.003.20282; through 22.003.20281; through None |
| CVE-2023-22241 | 7.8 | Jan 27 | ZDI-CAN-19516: Adobe Acrobat Reader DC AcroForm Annotation Out-Of-Bounds Write Remote Code Execution Vulnerability Affected: through 20.005.30418; through 22.003.20282; through 22.003.20281; through None |
| CVE-2023-22242 | 7.8 | Jan 27 | ZDI-CAN-19515: Adobe Acrobat Reader DC AcroForm Annotation Out-Of-Bounds Write Remote Code Execution Vulnerability Affected: through 20.005.30418; through 22.003.20282; through 22.003.20281; through None |
| CVE-2023-21606 | 7.8 | Jan 18 | Adobe Acrobat Reader DC Font Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability Affected: through 20.005.30418; through 22.003.20282; through 22.003.20281; through None |
| CVE-2023-21611 | 7.8 | Jan 18 | Adobe Acrobat Reader Creation of Temporary File in Directory with Incorrect Permissions Privilege escalation Affected: through 20.005.30418; through 22.003.20282; through 22.003.20281; through None |
| CVE-2023-21612 | 7.8 | Jan 18 | Adobe Acrobat Reader Creation of Temporary File in Directory with Incorrect Permissions Privilege escalation Affected: through 20.005.30418; through 22.003.20282; through 22.003.20281; through None |
| CVE-2023-21609 | 7.8 | Jan 18 | Adobe Acrobat Reader DC AcroForm Annotation Out-Of-Bounds Write Remote Code Execution Vulnerability Affected: through 20.005.30418; through 22.003.20282; through 22.003.20281; through None |
| CVE-2023-21604 | 7.8 | Jan 18 | Adobe Acrobat Reader Stack-based Buffer Overflow Arbitrary code execution Affected: through 20.005.30418; through 22.003.20282; through 22.003.20281; through None |
| CVE-2023-21607 | 7.8 | Jan 18 | Adobe Acrobat Reader Improper Input Validation Remote Code Execution Vulnerability Affected: through 20.005.30418; through 22.003.20282; through 22.003.20281; through None |
| CVE-2023-21579 | 7.8 | Jan 18 | Adobe Acrobat Reader DC Font Parsing Integer Overflow Remote Code Execution Vulnerability Affected: through 20.005.30418; through 22.003.20282; through 22.003.20281; through None |
| CVE-2023-21610 | 7.8 | Jan 18 | Adobe Acrobat Reader Stack-based Buffer Overflow Arbitrary code execution Affected: through 20.005.30418; through 22.003.20282; through 22.003.20281; through None |
| CVE-2023-21605 | 7.8 | Jan 18 | Adobe Acrobat Reader DC Font Parsing Heap-based Buffer Overflow Arbitrary code execution Affected: through 20.005.30418; through 22.003.20282; through 22.003.20281; through None |
| CVE-2022-42339 | 7.8 | Oct 14 | Adobe Acrobat Reader DC XFA Parsing Stack Overflow Remote Code Execution Affected: through 20.005.30381; through 22.002.20212; through None |
| CVE-2022-38450 | 7.8 | Oct 14 | Adobe Acrobat Reader DC XFA Parsing Stack Overflow Remote Code Execution Vulnerability Affected: through 20.005.30381; through 22.002.20212; through None |
| CVE-2022-35667 | 7.8 | Aug 11 | Adobe Acrobat Reader versions 22.001.20169 (and earlier), 20.005.30362 (and earlier) and 17.012.30249 (and earlier) are affected by an out-of-bounds write vulnerability that could… Affected: 20.001.30005 through 20.005.30362; 17.011.30059 through 17.012.30249 |
| CVE-2022-35666 | 7.8 | Aug 11 | Adobe Acrobat Reader versions 22.001.20169 (and earlier), 20.005.30362 (and earlier) and 17.012.30249 (and earlier) are affected by an Improper Input Validation vulnerability that… Affected: 20.001.30005 through 20.005.30362; 17.011.30059 through 17.012.30249 |
| CVE-2022-35665 | 7.8 | Aug 11 | Adobe Acrobat Reader versions 22.001.20169 (and earlier), 20.005.30362 (and earlier) and 17.012.30249 (and earlier) are affected by a Use After Free vulnerability that could… Affected: 20.001.30005 through 20.005.30362; 17.011.30059 through 17.012.30249 |
| CVE-2022-35672 | 7.8 | Jul 27 | Adobe Acrobat Reader version 22.001.20085 (and earlier), 20.005.30314 (and earlier) and 17.012.30205 (and earlier) are affected by an out-of-bounds read vulnerability when parsing… Affected: 20.001.30005 through 20.005.30314; 20.001.30005 through 20.005.30311; 17.011.30059 through 17.012.30205 |
| CVE-2022-34230 | 7.8 | Jul 15 | Adobe Acrobat Reader versions 22.001.20142 (and earlier), 20.005.30334 (and earlier) and 17.012.30229 (and earlier) are affected by a Use After Free vulnerability that could… Affected: 20.001.30005 through 20.005.30334; 20.001.30005 through 20.005.30331; 17.011.30059 through 17.012.30229; 17.011.30059 through 17.012.30227 |
| CVE-2022-34229 | 7.8 | Jul 15 | Adobe Acrobat Reader versions 22.001.20142 (and earlier), 20.005.30334 (and earlier) and 17.012.30229 (and earlier) are affected by a Use After Free vulnerability that could… Affected: 20.001.30005 through 20.005.30334; 20.001.30005 through 20.005.30331; 17.011.30059 through 17.012.30229; 17.011.30059 through 17.012.30227 |
| CVE-2022-34228 | 7.8 | Jul 15 | Adobe Acrobat Reader versions 22.001.20142 (and earlier), 20.005.30334 (and earlier) and 17.012.30229 (and earlier) are affected by an Access of Uninitialized Pointer… Affected: 20.001.30005 through 20.005.30334; 20.001.30005 through 20.005.30331; 17.011.30059 through 17.012.30229; 17.011.30059 through 17.012.30227 |
| CVE-2022-34226 | 7.8 | Jul 15 | Adobe Acrobat Reader versions 22.001.20142 (and earlier), 20.005.30334 (and earlier) and 17.012.30229 (and earlier) are affected by an out-of-bounds read vulnerability when… Affected: 20.001.30005 through 20.005.30334; 20.001.30005 through 20.005.30331; 17.011.30059 through 17.012.30229; 17.011.30059 through 17.012.30227 |
| CVE-2022-34225 | 7.8 | Jul 15 | Adobe Acrobat Reader versions 22.001.20142 (and earlier), 20.005.30334 (and earlier) and 17.012.30229 (and earlier) are affected by a Use After Free vulnerability that could… Affected: 20.001.30005 through 20.005.30334; 20.001.30005 through 20.005.30331; 17.011.30059 through 17.012.30229; 17.011.30059 through 17.012.30227 |
| CVE-2022-34223 | 7.8 | Jul 15 | Adobe Acrobat Reader versions 22.001.20142 (and earlier), 20.005.30334 (and earlier) and 17.012.30229 (and earlier) are affected by a Use After Free vulnerability that could… Affected: 20.001.30005 through 20.005.30334; 20.001.30005 through 20.005.30331; 17.011.30059 through 17.012.30229; 17.011.30059 through 17.012.30227 |
| CVE-2022-34222 | 7.8 | Jul 15 | Adobe Acrobat Reader versions 22.001.20142 (and earlier), 20.005.30334 (and earlier) and 17.012.30229 (and earlier) are affected by an out-of-bounds read vulnerability when… Affected: 20.001.30005 through 20.005.30334; 20.001.30005 through 20.005.30331; 17.011.30059 through 17.012.30229; 17.011.30059 through 17.012.30227 |
| CVE-2022-34221 | 7.8 | Jul 15 | Adobe Acrobat Reader versions 22.001.20142 (and earlier), 20.005.30334 (and earlier) and 17.012.30229 (and earlier) are affected by an Access of Resource Using Incompatible Type… Affected: 20.001.30005 through 20.005.30334; 20.001.30005 through 20.005.30331; 17.011.30059 through 17.012.30229; 17.011.30059 through 17.012.30227 |
| CVE-2022-34220 | 7.8 | Jul 15 | Adobe Acrobat Reader versions 22.001.20142 (and earlier), 20.005.30334 (and earlier) and 17.012.30229 (and earlier) are affected by a Use After Free vulnerability that could… Affected: 20.001.30005 through 20.005.30334; 20.001.30005 through 20.005.30331; 17.011.30059 through 17.012.30229; 17.011.30059 through 17.012.30227 |
| CVE-2022-34219 | 7.8 | Jul 15 | Adobe Acrobat Reader versions 22.001.20142 (and earlier), 20.005.30334 (and earlier) and 17.012.30229 (and earlier) are affected by a Use After Free vulnerability that could… Affected: 20.001.30005 through 20.005.30334; 20.001.30005 through 20.005.30331; 17.011.30059 through 17.012.30229; 17.011.30059 through 17.012.30227 |
| CVE-2022-34217 | 7.8 | Jul 15 | Adobe Acrobat Reader versions 22.001.20142 (and earlier), 20.005.30334 (and earlier) and 17.012.30229 (and earlier) are affected by an Out-Of-Bounds Write vulnerability that could… Affected: 20.001.30005 through 20.005.30334; 20.001.30005 through 20.005.30331; 17.011.30059 through 17.012.30229; 17.011.30059 through 17.012.30227 |
| CVE-2022-34216 | 7.8 | Jul 15 | Adobe Acrobat Reader versions 22.001.20142 (and earlier), 20.005.30334 (and earlier) and 17.012.30229 (and earlier) are affected by a Use After Free vulnerability that could… Affected: 20.001.30005 through 20.005.30334; 20.001.30005 through 20.005.30331; 17.011.30059 through 17.012.30229; 17.011.30059 through 17.012.30227 |
| CVE-2022-34215 | 7.8 | Jul 15 | Adobe Acrobat Reader versions 22.001.20142 (and earlier), 20.005.30334 (and earlier) and 17.012.30229 (and earlier) are affected by an out-of-bounds read vulnerability when… Affected: 20.001.30005 through 20.005.30334; 20.001.30005 through 20.005.30331; 17.011.30059 through 17.012.30229; 17.011.30059 through 17.012.30227 |
| CVE-2022-28838 | 7.8 | May 11 | Acrobat Acrobat Pro DC version 22.001.2011x (and earlier), 20.005.3033x (and earlier) and 17.012.3022x (and earlier) are affected by a use-after-free vulnerability that could… Affected: 17.011.30059 through 17.012.30205; 20.001.30005 through 20.005.30314; 20.001.30005 through 20.005.30311 |
The 500 most important CVEs for this product (exploited first, then by severity)