AC
Product
Acrobat
On CISA KEVExploited in the wildRansomware-linked
1,416
CVEs
25
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 219High 281Medium 0Low 0
Watch
Add Acrobat to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-47911 | 7.8 | Jun 9 | Acrobat Reader | Out-of-bounds Write (CWE-787) Affected: before 24.001.30383; before 26.001.21662 |
| CVE-2026-27278 | 7.8 | Mar 10 | Acrobat Reader | Use After Free (CWE-416) Affected: 24.001.20604 before 24.001.30356 |
| CVE-2026-27220 | 7.8 | Mar 10 | Acrobat Reader | Use After Free (CWE-416) Affected: 24.001.20604 before 24.001.30356 |
| CVE-2025-64899 | 7.8 | Dec 9 | Acrobat Reader | Out-of-bounds Read (CWE-125) Affected: 20.001.3005 before 20.005.30838; 24.001.20604 before 24.001.30307; 24.001.20604 before 24.001.30308 |
| CVE-2025-64785 | 7.8 | Dec 9 | Acrobat Reader | Untrusted Search Path (CWE-426) Affected: 20.001.3005 before 20.005.30838; 24.001.20604 before 24.001.30307; 24.001.20604 before 24.001.30308 |
| CVE-2025-54257 | 7.8 | Sep 9 | Acrobat Reader | Use After Free (CWE-416) Affected: 24.0.0 before 24.001.30264; 20.001.30002 before 20.005.30793; 20.001.30002 before 20.005.30791 |
| CVE-2025-43573 | 7.8 | Jun 10 | Acrobat Reader | Use After Free (CWE-416) Affected: 20.001.30002 before 20.005.30774; 24.0.0 before 24.001.30254 |
| CVE-2025-43577 | 7.8 | Jun 10 | Acrobat Reader | Use After Free (CWE-416) Affected: 20.001.30002 before 20.005.30774; 24.0.0 before 24.001.30254 |
| CVE-2025-43550 | 7.8 | Jun 10 | Acrobat Reader | Use After Free (CWE-416) Affected: 20.001.30002 before 20.005.30774; 24.0.0 before 24.001.30254 |
| CVE-2025-43575 | 7.8 | Jun 10 | Acrobat Reader | Out-of-bounds Write (CWE-787) Affected: 20.001.30002 before 20.005.30774; 24.0.0 before 24.001.30254 |
| CVE-2025-43574 | 7.8 | Jun 10 | Acrobat Reader | Use After Free (CWE-416) Affected: 20.001.30002 before 20.005.30774; 24.0.0 before 24.001.30254 |
| CVE-2025-43576 | 7.8 | Jun 10 | Acrobat Reader | Use After Free (CWE-416) Affected: 20.001.30002 before 20.005.30774; 24.0.0 before 24.001.30254 |
| CVE-2025-27158 | 7.8 | Mar 11 | Acrobat Reader | Access of Uninitialized Pointer (CWE-824) Affected: 20.001.30002 before 20.005.30763; 24.0.0 before 24.001.30235 |
| CVE-2025-27161 | 7.8 | Mar 11 | Acrobat Reader | Out-of-bounds Read (CWE-125) Affected: 20.001.30002 before 20.005.30763; 24.0.0 before 24.001.30235 |
| CVE-2025-27174 | 7.8 | Mar 11 | Acrobat Reader | Use After Free (CWE-416) Affected: 20.001.30002 before 20.005.30763; 24.0.0 before 24.001.30235 |
| CVE-2025-27162 | 7.8 | Mar 11 | Acrobat Reader | Access of Uninitialized Pointer (CWE-824) Affected: 20.001.30002 before 20.005.30763; 24.0.0 before 24.001.30235 |
| CVE-2025-27160 | 7.8 | Mar 11 | Acrobat Reader | Use After Free (CWE-416) Affected: 20.001.30002 before 20.005.30763; 24.0.0 before 24.001.30235 |
| CVE-2025-27159 | 7.8 | Mar 11 | Acrobat Reader | Use After Free (CWE-416) Affected: 20.001.30002 before 20.005.30763; 24.0.0 before 24.001.30235 |
| CVE-2022-44518 | 7.8 | Dec 18 | Acrobat Reader | Use After Free (CWE-416) Affected: 17.011.30059 through 17.012.30205; 20.001.30005 through 20.005.30314; 20.001.30005 through 20.005.30311 |
| CVE-2022-44512 | 7.8 | Dec 18 | Acrobat Reader | Out-of-bounds Write (CWE-787) Affected: 17.011.30059 through 17.012.30205; 20.001.30005 through 20.005.30314; 20.001.30005 through 20.005.30311 |
| CVE-2022-44520 | 7.8 | Dec 18 | Acrobat Reader | Use After Free (CWE-416) Affected: 17.011.30059 through 17.012.30205; 20.001.30005 through 20.005.30314; 20.001.30005 through 20.005.30311 |
| CVE-2022-44513 | 7.8 | Dec 18 | Acrobat Reader | Out-of-bounds Write (CWE-787) Affected: 17.011.30059 through 17.012.30205; 20.001.30005 through 20.005.30314; 20.001.30005 through 20.005.30311 |
| CVE-2022-44514 | 7.8 | Dec 18 | Acrobat Reader | Use After Free (CWE-416) Affected: 17.011.30059 through 17.012.30205; 20.001.30005 through 20.005.30314; 20.001.30005 through 20.005.30311 |
| CVE-2024-49530 | 7.8 | Dec 10 | Acrobat Reader | Use After Free (CWE-416) Affected: before 20.005.30748; 24.0 before 24.001.30225 |
| CVE-2024-41869 | 7.8 | Sep 13 | Acrobat Reader | Use After Free (CWE-416) Affected: before 20.005.30680; 24.001.0 before 24.001.30187 |
| CVE-2024-45112 | 7.8 | Sep 13 | Acrobat Reader | Access of Resource Using Incompatible Type ('Type Confusion') (CWE-843) Affected: before 20.005.30680; 24.001.0 before 24.001.30187 |
| CVE-2024-39426 | 7.8 | Aug 14 | ZDI-CAN-24312: Adobe Acrobat Reader DC Annotation Memory Corruption Remote Code Execution Vulnerability Affected: 20.001.30005 before 20.005.30655; 24.001.20604 before 24.001.30159 |
| CVE-2024-39422 | 7.8 | Aug 14 | ZDI-CAN-24090: New Vulnerability Report - Use-after-free remote code execution vulnerability in Adobe Acrobat Reader DC Affected: 20.001.30005 before 20.005.30655; 24.001.20604 before 24.001.30159 |
| CVE-2024-41831 | 7.8 | Aug 14 | ZDI-CAN-24569: Adobe Acrobat Reader DC AcroForm Use-After-Free Remote Code Execution Vulnerability Affected: 20.001.30005 before 20.005.30655; 24.001.20604 before 24.001.30159 |
| CVE-2024-39423 | 7.8 | Aug 14 | ZDI-CAN-24182: New Vulnerability Report - Adobe Acrobat Reader DC AcroForm Annotation Out-Of-Bounds Write Remote Code Execution Vulnerability Affected: 20.001.30005 before 20.005.30655; 24.001.20604 before 24.001.30159 |
| CVE-2024-39424 | 7.8 | Aug 14 | ZDI-CAN-24309: Adobe Acrobat Reader DC Annotation Use-After-Free Remote Code Execution Vulnerability Affected: 20.001.30005 before 20.005.30655; 24.001.20604 before 24.001.30159 |
| CVE-2024-41830 | 7.8 | Aug 14 | Talos Security Advisory for Adobe (TALOS-2024-2009) Affected: 20.001.30005 before 20.005.30655; 24.001.20604 before 24.001.30159 |
| CVE-2024-39383 | 7.8 | Aug 14 | PoC sample of unknown vulnerability detected by EXPMON system Affected: 20.001.3005 before 20.005.30655; 24.001.20604 before 24.001.30159 |
| CVE-2024-34122 | 7.8 | Jul 2 | T5 Acrobat Vulnerability - Exploitable crash in DecodeTile Affected: through 126.0.2592.68 |
| CVE-2024-30279 | 7.8 | May 23 | ZDI-CAN-22887: Adobe Acrobat Reader DC JPEG2000 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability Affected: 20.001.30002 before 20.005.30635; 20.001.30002 before 20.005.30636 |
| CVE-2024-30280 | 7.8 | May 23 | ZDI-CAN-22867: Adobe Acrobat Pro DC AcroForm Annotation Out-Of-Bounds Read Remote Code Execution Vulnerability Affected: 20.001.30002 before 20.005.30635; 20.001.30002 before 20.005.30636 |
| CVE-2024-34100 | 7.8 | May 15 | Use-After-Free vulnerability in the latest Adobe Acrobat Reader DC when open malicious PDF file Affected: 20.001.30002 before 20.005.30635; 20.001.30002 before 20.005.30636 |
| CVE-2024-30284 | 7.8 | May 15 | ZDI-CAN-23466: Adobe Acrobat Reader DC Annotation Use-After-Free Remote Code Execution Vulnerability Affected: 20.001.30002 before 20.005.30635; 20.001.30002 before 20.005.30636 |
| CVE-2024-34098 | 7.8 | May 15 | ZDI-CAN-XXXX: [Pwn2Own] Acrobat sandbox bypass part 1 of 2 Affected: 20.001.30002 before 20.005.30635; 20.001.30002 before 20.005.30636 |
| CVE-2024-34095 | 7.8 | May 15 | ZDI-CAN-23475: Adobe Acrobat Reader DC Annotation Use-After-Free Remote Code Execution Vulnerability Affected: 20.001.30002 before 20.005.30635; 20.001.30002 before 20.005.30636 |
| CVE-2024-34099 | 7.8 | May 15 | ZDI-CAN-XXXX: [Pwn2Own] Acrobat sandbox bypass part 2 of 2 Affected: 20.001.30002 before 20.005.30635; 20.001.30002 before 20.005.30636 |
| CVE-2024-34096 | 7.8 | May 15 | ZDI-CAN-23472: Adobe Acrobat Reader DC Annotation Use-After-Free Remote Code Execution Vulnerability Affected: 20.001.30002 before 20.005.30635; 20.001.30002 before 20.005.30636 |
| CVE-2024-34097 | 7.8 | May 15 | ZDI-CAN-23473: Adobe Acrobat Reader DC Annotation Use-After-Free Remote Code Execution Vulnerability Affected: 20.001.30002 before 20.005.30635; 20.001.30002 before 20.005.30636 |
| CVE-2024-34094 | 7.8 | May 15 | ZDI-CAN-23474: Adobe Acrobat Reader DC Annotation Use-After-Free Remote Code Execution Vulnerability Affected: 20.001.30002 before 20.005.30635; 20.001.30002 before 20.005.30636 |
| CVE-2024-30310 | 7.8 | May 15 | ZDI-CAN-23327: Adobe Acrobat Reader DC PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability Affected: 20.001.30002 before 20.005.30635; 20.001.30002 before 20.005.30636 |
| CVE-2024-30301 | 7.8 | May 2 | ZDI-CAN-23042: Adobe Acrobat Reader DC AcroForm Use-After-Free Remote Code Execution Vulnerability Affected: 20.001.30002 before 20.005.30574 |
| CVE-2024-30303 | 7.8 | May 2 | ZDI-CAN-23044: Adobe Acrobat Reader DC AcroForm Use-After-Free Remote Code Execution Vulnerability Affected: 20.001.30002 before 20.005.30574 |
| CVE-2024-30305 | 7.8 | May 2 | ZDI-CAN-23043: Adobe Acrobat Reader DC AcroForm Use-After-Free Remote Code Execution Vulnerability Affected: 20.001.30002 before 20.005.30574 |
| CVE-2024-30306 | 7.8 | May 2 | ZDI-CAN-23106: Adobe Acrobat Reader DC AcroForm Out-Of-Bounds Read Remote Code Execution Vulnerability Affected: 20.001.30002 before 20.005.30574 |
| CVE-2024-30304 | 7.8 | May 2 | ZDI-CAN-23040: Adobe Acrobat Reader DC Annotation Use-After-Free Remote Code Execution Vulnerability Affected: 20.001.30002 before 20.005.30574 |
The 500 most important CVEs for this product (exploited first, then by severity)