AR
Product
Acrobat Reader
On CISA KEVExploited in the wildRansomware-linked
1,117
CVEs
21
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 24High 395Medium 81Low 0
Watch
Add Acrobat Reader to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2021-40731 | 7.8 | Oct 15 | Adobe Acrobat Reader DC version 21.007.20095 (and earlier), 21.007.20096 (and earlier), 20.004.30015 (and earlier), and 17.011.30202 (and earlier) is affected by an out-of-bounds… Affected: 20.001.30005 through 20.004.30015; 17.011.30158 through 17.011.30202 |
| CVE-2021-40728 | 7.8 | Oct 15 | Adobe Acrobat Reader DC version 21.007.20095 (and earlier), 21.007.20096 (and earlier), 20.004.30015 (and earlier), and 17.011.30202 (and earlier) is affected by a use-after-free… Affected: 20.001.30005 through 20.004.30015; 17.011.30158 through 17.011.30202 |
| CVE-2021-40724 | 7.8 | Oct 15 | Acrobat Reader for Android versions 21.8.0 (and earlier) are affected by a Path traversal vulnerability Affected: through 21.8.0 |
| CVE-2021-39863 | 7.8 | Sep 29 | Acrobat Reader DC versions 2021.005.20060 (and earlier), 2020.004.30006 (and earlier) and 2017.011.30199 (and earlier) are affected by a Buffer Overflow vulnerability when parsing… Affected: 20.001.30005 through 20.004.30006 |
| CVE-2021-39843 | 7.8 | Sep 29 | Acrobat Reader DC versions 2021.005.20060 (and earlier), 2020.004.30006 (and earlier) and 2017.011.30199 (and earlier) are affected by an out-of-bounds write vulnerability that… Affected: 20.001.30005 through 20.004.30006; 17.011.30059 through 17.011.30199 |
| CVE-2021-39842 | 7.8 | Sep 29 | Acrobat Reader DC versions 2021.005.20060 (and earlier), 2020.004.30006 (and earlier) and 2017.011.30199 (and earlier) are affected by a use-after-free vulnerability that could… Affected: 20.001.30005 through 20.004.30006; 17.011.30059 through 17.011.30199 |
| CVE-2021-39841 | 7.8 | Sep 29 | Acrobat Reader DC versions 2021.005.20060 (and earlier), 2020.004.30006 (and earlier) and 2017.011.30199 (and earlier) are affected by a Type Confusion vulnerability Affected: 20.001.30005 through 20.004.30006; 17.011.30059 through 17.011.30199 |
| CVE-2021-39840 | 7.8 | Sep 29 | Acrobat Reader DC versions 2021.005.20060 (and earlier), 2020.004.30006 (and earlier) and 2017.011.30199 (and earlier) are affected by a use-after-free vulnerability when… Affected: 20.001.30005 through 20.004.30006; 17.011.30059 through 17.011.30199 |
| CVE-2021-39839 | 7.8 | Sep 29 | Acrobat Reader DC versions 2021.005.20060 (and earlier), 2020.004.30006 (and earlier) and 2017.011.30199 (and earlier) are affected by a use-after-free vulnerability in the… Affected: 20.001.30005 through 20.004.30006; 17.011.30059 through 17.011.30199 |
| CVE-2021-39838 | 7.8 | Sep 29 | Acrobat Reader DC versions 2021.005.20060 (and earlier), 2020.004.30006 (and earlier) and 2017.011.30199 (and earlier) are affected by a use-after-free vulnerability in the… Affected: 20.001.30005 through 20.004.30006; 17.011.30059 through 17.011.30199 |
| CVE-2021-39837 | 7.8 | Sep 29 | Acrobat Reader DC versions 2021.005.20060 (and earlier), 2020.004.30006 (and earlier) and 2017.011.30199 (and earlier) are affected by a use-after-free vulnerability in the… Affected: 20.001.30005 through 20.004.30006; 17.011.30059 through 17.011.30199 |
| CVE-2021-39836 | 7.8 | Sep 29 | Acrobat Reader DC versions 2021.005.20060 (and earlier), 2020.004.30006 (and earlier) and 2017.011.30199 (and earlier) are affected by a use-after-free vulnerability in the… Affected: 17.011.30059 through 17.011.30199; 20.001.30005 through 20.004.30006 |
| CVE-2021-21086 | 7.8 | Sep 2 | Acrobat Reader DC versions versions 2020.013.20074 (and earlier), 2020.001.30018 (and earlier) and 2017.011.30188 (and earlier) are affected by an Out-of-bounds Write… Affected: 17.011.30059 through 17.011.30188; 20.001.30005 through 20.001.300183 |
| CVE-2021-28632 | 7.8 | Aug 24 | Acrobat Reader DC versions versions 2021.001.20155 (and earlier), 2020.001.30025 (and earlier) and 2017.011.30196 (and earlier) are affected by an Use After Free vulnerability Affected: 17.011.30180 through 17.011.30196; 20.001.30005 through 20.001.30025 |
| CVE-2021-28631 | 7.8 | Aug 24 | Acrobat Reader DC versions versions 2021.001.20155 (and earlier), 2020.001.30025 (and earlier) and 2017.011.30196 (and earlier) are affected by an Use After Free vulnerability Affected: 17.011.30180 through 17.011.30196; 20.001.30005 through 20.001.30025 |
| CVE-2021-28554 | 7.8 | Aug 24 | Acrobat Reader DC versions versions 2021.001.20155 (and earlier), 2020.001.30025 (and earlier) and 2017.011.30196 (and earlier) are affected by an Out-of-bounds Read vulnerability Affected: 17.011.30180 through 17.011.30196; 20.001.30005 through 20.001.30025 |
| CVE-2021-28552 | 7.8 | Aug 24 | Acrobat Reader DC versions versions 2021.001.20155 (and earlier), 2020.001.30025 (and earlier) and 2017.011.30196 (and earlier) are affected by an Use After Free vulnerability Affected: 17.011.30180 through 17.011.30196; 20.001.30005 through 20.001.30025 |
| CVE-2021-28551 | 7.8 | Aug 24 | Acrobat Reader DC versions versions 2021.001.20155 (and earlier), 2020.001.30025 (and earlier) and 2017.011.30196 (and earlier) are affected by an Out-of-bounds read vulnerability Affected: 17.011.30180 through 17.011.30194; 20.001.30005 through 20.001.30020 |
| CVE-2021-21063 | 7.8 | Feb 11 | Acrobat Reader DC versions versions 2020.013.20074 (and earlier), 2020.001.30018 (and earlier) and 2017.011.30188 (and earlier) are affected by a Memory corruption vulnerability… Affected: 17.011.30059 through 17.011.30188; 20.001.30005 through 20.001.30018 |
| CVE-2021-21062 | 7.8 | Feb 11 | Acrobat Reader DC versions versions 2020.013.20074 (and earlier), 2020.001.30018 (and earlier) and 2017.011.30188 (and earlier) are affected by a Memory corruption vulnerability… Affected: 17.011.30059 through 17.011.30188; 20.001.30005 through 20.001.30018 |
| CVE-2021-21059 | 7.8 | Feb 11 | Acrobat Reader DC versions versions 2020.013.20074 (and earlier), 2020.001.30018 (and earlier) and 2017.011.30188 (and earlier) are affected by a Memory corruption vulnerability… Affected: 17.011.30059 through 17.011.30188; 20.001.30005 through 20.001.30018 |
| CVE-2021-21058 | 7.8 | Feb 11 | Acrobat Reader DC versions versions 2020.013.20074 (and earlier), 2020.001.30018 (and earlier) and 2017.011.30188 (and earlier) are affected by a Memory corruption vulnerability… Affected: 17.011.30059 through 17.011.30188; 20.001.30005 through 20.001.30018 |
| CVE-2021-21044 | 7.8 | Feb 11 | Acrobat Reader DC versions versions 2020.013.20074 (and earlier), 2020.001.30018 (and earlier) and 2017.011.30188 (and earlier) are affected by an Out-of-bounds Write… Affected: 17.0 through 17.011.30188; 20.0 through 20.001.300183 |
| CVE-2021-21041 | 7.8 | Feb 11 | Acrobat Reader DC versions versions 2020.013.20074 (and earlier), 2020.001.30018 (and earlier) and 2017.011.30188 (and earlier) are affected by a use-after-free vulnerability Affected: 17.0 through 17.011.30188; 20.0 through 20.001.300183 |
| CVE-2021-21040 | 7.8 | Feb 11 | Acrobat Reader DC versions versions 2020.013.20074 (and earlier), 2020.001.30018 (and earlier) and 2017.011.30188 (and earlier) are affected by a Use After Free vulnerability Affected: 17.0 through 17.011.30188; 20.0 through 20.001.300183 |
| CVE-2021-21039 | 7.8 | Feb 11 | Acrobat Reader DC versions versions 2020.013.20074 (and earlier), 2020.001.30018 (and earlier) and 2017.011.30188 (and earlier) are affected by a Use After Free vulnerability Affected: 17.0 through 17.011.30188; 20.0 through 20.001.300183 |
| CVE-2021-21038 | 7.8 | Feb 11 | Acrobat Reader DC versions versions 2020.013.20074 (and earlier), 2020.001.30018 (and earlier) and 2017.011.30188 (and earlier) are affected by an Out-of-bounds Write… Affected: 17.0 through 17.011.30188; 20.0 through 20.001.300183 |
| CVE-2021-21037 | 7.8 | Feb 11 | Acrobat Reader DC versions versions 2020.013.20074 (and earlier), 2020.001.30018 (and earlier) and 2017.011.30188 (and earlier) are affected by a Path Traversal vulnerability Affected: 17.0 through 17.011.30188; 20.0 through 20.001.300183 |
| CVE-2021-21036 | 7.8 | Feb 11 | Acrobat Reader DC versions versions 2020.013.20074 (and earlier), 2020.001.30018 (and earlier) and 2017.011.30188 (and earlier) are affected by an Integer Overflow vulnerability Affected: 17.0 through 17.011.30188; 20.0 through 20.001.300183 |
| CVE-2020-24437 | 7.8 | Nov 5 | Acrobat Reader DC versions 2020.012.20048 (and earlier), 2020.001.30005 (and earlier) and 2017.011.30175 (and earlier) are affected by a use-after-free vulnerability in the… Affected: through 20.001.30005 |
| CVE-2020-24436 | 7.8 | Nov 5 | Acrobat Pro DC versions 2020.012.20048 (and earlier), 2020.001.30005 (and earlier) and 2017.011.30175 (and earlier) are affected by an out-of-bounds write vulnerability that could… Affected: through 20.001.30005 |
| CVE-2020-24435 | 7.8 | Nov 5 | Acrobat Reader DC versions 2020.012.20048 (and earlier), 2020.001.30005 (and earlier) and 2017.011.30175 (and earlier) are affected by a heap-based buffer overflow vulnerability… Affected: through 20.001.30005 |
| CVE-2020-24433 | 7.8 | Nov 5 | Adobe Acrobat Reader DC versions 2020.012.20048 (and earlier), 2020.001.30005 (and earlier) and 2017.011.30175 (and earlier) are affected by a local privilege escalation… Affected: through 20.001.30005 |
| CVE-2020-24432 | 7.8 | Nov 5 | Acrobat Reader DC versions 2020.012.20048 (and earlier), 2020.001.30005 (and earlier) and 2017.011.30175 (and earlier) and Adobe Acrobat Pro DC 2017.011.30175 (and earlier) are… Affected: through 20.001.30005 |
| CVE-2020-24430 | 7.8 | Nov 5 | Acrobat Reader DC versions 2020.012.20048 (and earlier), 2020.001.30005 (and earlier) and 2017.011.30175 (and earlier) are affected by a use-after-free vulnerability when handling… Affected: through 20.001.30005 |
| CVE-2020-24429 | 7.8 | Nov 5 | Acrobat Reader DC versions 2020.012.20048 (and earlier), 2020.001.30005 (and earlier) and 2017.011.30175 (and earlier) for macOS are affected by a signature verification bypass… Affected: through 20.001.30005 |
| CVE-2016-0947 | 7.8 | Jan 14 | Untrusted search path vulnerability in Adobe Download Manager, as used in Adobe Reader and Acrobat before 11.0.14, Acrobat and Acrobat Reader DC Classic before 15.006.30119, and… Affected: through 11.0.13; 11.0.0; 11.0.1; 11.0.2; 11.0.3; 11.0.4; +8 more |
| CVE-2009-0658 | 7.8 | Feb 20 | Buffer overflow in Adobe Reader 9.0 and earlier, and Acrobat 9.0 and earlier, allows remote attackers to execute arbitrary code via a crafted PDF document, related to a… Affected: 7.0 through 7.1.1; 8.0 through 8.1.4; 9.0 |
| CVE-2020-24428 | 7.7 | Nov 5 | Acrobat Reader DC versions 2020.012.20048 (and earlier), 2020.001.30005 (and earlier) and 2017.011.30175 (and earlier) for macOS are affected by a time-of-check time-of-use… Affected: through 20.001.30005 |
| CVE-2024-34129 | 7.5 | Jun 13 | Acrobat Mobile Sign Android versions 24.4.2.33155 and earlier are affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that… Affected: before 24.5.0.33694 |
| CVE-2017-16366 | 7.5 | Dec 9 | An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versions, and 11.0.22 and… Affected: through 11.0.22; 17.0 through 17.011.30066 |
| CVE-2005-1306 | 7.5 | Jun 15 | The Adobe Reader control in Adobe Reader and Acrobat 7.0 and 7.0.1 allows remote attackers to determine the existence of files via Javascript containing XML script, aka the "XML… Affected: 7.0; 7.0.1 |
| CVE-2022-28247 | 7.3 | May 11 | Acrobat Reader DC version 22.001.2011x (and earlier), 20.005.3033x (and earlier) and 17.012.3022x (and earlier) are affected by an uncontrolled search path vulnerability that… Affected: 17.011.30059 through 17.012.30205; 20.001.30005 through 20.005.30314; 20.001.30005 through 20.005.30311 |
| CVE-2024-39425 | 7.0 | Aug 14 | Acrobat Reader versions 20.005.30636, 24.002.20965, 24.002.20964, 24.001.30123 and earlier are affected by a Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability that… Affected: 20.001.3005 before 20.005.30655 |
| CVE-2024-39420 | 7.0 | Aug 14 | Acrobat Reader versions 20.005.30636, 24.002.21005, 24.001.30159, 20.005.30655, 24.002.20965, 24.002.20964, 24.001.30123, 24.003.20054 and earlier are affected by a Time-of-check… Affected: 20.001.3005 before 20.005.30655 |
The 500 most important CVEs for this product (exploited first, then by severity)