AR
Product
Acrobat Reader
On CISA KEVExploited in the wildRansomware-linked
1,117
CVEs
21
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 24High 395Medium 81Low 0
Watch
Add Acrobat Reader to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2017-11232 | 6.5 | Aug 11 | Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable use after free vulnerability… Affected: 17.011.00000 through 17.011.30066 |
| CVE-2017-11230 | 6.5 | Aug 11 | Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable memory corruption vulnerability… Affected: 17.011.00000 through 17.011.30066 |
| CVE-2017-11217 | 6.5 | Aug 11 | Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable memory corruption vulnerability… Affected: 17.011.00000 through 17.011.30066 |
| CVE-2017-11210 | 6.5 | Aug 11 | Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable memory corruption vulnerability… Affected: 17.011.00000 through 17.011.30066 |
| CVE-2017-11209 | 6.5 | Aug 11 | Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable memory corruption vulnerability… Affected: 17.011.00000 through 17.011.30066 |
| CVE-2026-81997 | 6.3 | Sep 8 | Acrobat Reader | Incorrect Authorization (CWE-863) Affected: through 26.002.21900 |
| CVE-2026-81994 | 6.3 | Sep 8 | Acrobat Reader | Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') (CWE-1321) Affected: through 26.002.21900 |
| CVE-2024-49535 | 6.3 | Dec 10 | Acrobat Reader versions 24.005.20307, 24.001.30213, 24.001.30193, 20.005.30730, 20.005.30710 and earlier are affected by an Improper Restriction of XML External Entity Reference… Affected: 20.001.30002 before 20.005.30748 |
| CVE-2022-28244 | 6.3 | May 11 | Acrobat Reader DC versions 22.001.20085 (and earlier), 20.005.3031x (and earlier) and 17.012.30205 (and earlier) is affected by a violation of secure design principles through… Affected: 17.011.30059 through 17.012.30205; 20.001.30005 through 20.005.30314; 20.001.30005 through 20.005.30311 |
| CVE-2021-39846 | 6.1 | Sep 29 | Acrobat Reader DC versions 2021.005.20060 (and earlier), 2020.004.30006 (and earlier) and 2017.011.30199 (and earlier) are affected by a stack overflow vulnerability due to… Affected: 20.001.30005 through 20.004.30006; 17.011.30059 through 17.011.30199 |
| CVE-2021-39845 | 6.1 | Sep 29 | Acrobat Reader DC versions 2021.005.20060 (and earlier), 2020.004.30006 (and earlier) and 2017.011.30199 (and earlier) are affected by a stack overflow vulnerability due to… Affected: 20.001.30005 through 20.004.30006; 17.011.30059 through 17.011.30199 |
| CVE-2026-81984 | 5.5 | Sep 8 | Acrobat Reader | Use After Free (CWE-416) Affected: through 26.002.21900 |
| CVE-2026-81991 | 5.5 | Sep 8 | Acrobat Reader | Out-of-bounds Read (CWE-125) Affected: through 26.002.21900 |
| CVE-2026-79910 | 5.5 | Sep 8 | Acrobat Reader | Out-of-bounds Read (CWE-125) Affected: through 26.002.21900 |
| CVE-2026-81993 | 5.5 | Sep 8 | Acrobat Reader | Heap-based Buffer Overflow (CWE-122) Affected: through 26.002.21900 |
| CVE-2026-81977 | 5.5 | Sep 8 | Acrobat Reader | Integer Underflow (Wrap or Wraparound) (CWE-191) Affected: through 26.002.21900 |
| CVE-2026-80162 | 5.5 | Sep 8 | Acrobat Reader | Use After Free (CWE-416) Affected: through 26.002.21900 |
| CVE-2026-80160 | 5.5 | Sep 8 | Acrobat Reader | Out-of-bounds Read (CWE-125) Affected: through 26.002.21900 |
| CVE-2026-81982 | 5.5 | Sep 8 | Acrobat Reader | Out-of-bounds Read (CWE-125) Affected: through 26.002.21900 |
| CVE-2026-82001 | 5.5 | Sep 8 | Acrobat Reader | Uncontrolled Resource Consumption (CWE-400) Affected: through 26.002.21900 |
| CVE-2026-81978 | 5.5 | Sep 8 | Acrobat Reader | Out-of-bounds Read (CWE-125) Affected: through 26.002.21900 |
| CVE-2020-9711 | 5.5 | Jun 23 | Acrobat Reader | Out-of-bounds Read (CWE-125) Affected: through 2015.006.30523 |
| CVE-2020-9713 | 5.5 | Jun 23 | Acrobat Reader | Out-of-bounds Read (CWE-125) Affected: through 2015.006.30523 |
| CVE-2026-47961 | 5.5 | Jun 9 | Acrobat Reader | Out-of-bounds Read (CWE-125) Affected: before 26.001.21662 |
| CVE-2025-47112 | 5.5 | Jun 10 | Acrobat Reader versions 24.001.30235, 20.005.30763, 25.001.20521 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory Affected: 20.0 before 20.005.30774 |
| CVE-2025-47111 | 5.5 | Jun 10 | Acrobat Reader versions 24.001.30235, 20.005.30763, 25.001.20521 and earlier are affected by a NULL Pointer Dereference vulnerability that could lead to application… Affected: 20.0 before 20.005.30774 |
| CVE-2025-43579 | 5.5 | Jun 10 | Acrobat Reader versions 24.001.30235, 20.005.30763, 25.001.20521 and earlier are affected by an Information Exposure vulnerability that could result in a Security feature bypass Affected: 20.001.30002 before 20.005.30774 |
| CVE-2025-43578 | 5.5 | Jun 10 | Acrobat Reader versions 24.001.30235, 20.005.30763, 25.001.20521 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory Affected: 20.001.30002 before 20.005.30774 |
| CVE-2025-27164 | 5.5 | Mar 11 | Acrobat Reader versions 24.001.30225, 20.005.30748, 25.001.20428 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory Affected: 20.001.30002 before 20.005.30763 |
| CVE-2025-27163 | 5.5 | Mar 11 | Acrobat Reader versions 24.001.30225, 20.005.30748, 25.001.20428 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory Affected: 20.001.30002 before 20.005.30763 |
| CVE-2025-24431 | 5.5 | Mar 11 | Acrobat Reader versions 24.001.30225, 20.005.30748, 25.001.20428 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory Affected: 20.001.30002 before 20.005.30763 |
The 500 most important CVEs for this product (exploited first, then by severity)