AR
Product
Acrobat Reader
On CISA KEVExploited in the wildRansomware-linked
1,117
CVEs
21
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 24High 395Medium 81Low 0
Watch
Add Acrobat Reader to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2021-21038 | 7.8 | Feb 11 | Acrobat Reader DC versions versions 2020.013.20074 (and earlier), 2020.001.30018 (and earlier) and 2017.011.30188 (and earlier) are affected by an Out-of-bounds Write… Affected: 17.0 through 17.011.30188; 20.0 through 20.001.300183 |
| CVE-2021-21037 | 7.8 | Feb 11 | Acrobat Reader DC versions versions 2020.013.20074 (and earlier), 2020.001.30018 (and earlier) and 2017.011.30188 (and earlier) are affected by a Path Traversal vulnerability Affected: 17.0 through 17.011.30188; 20.0 through 20.001.300183 |
| CVE-2021-21036 | 7.8 | Feb 11 | Acrobat Reader DC versions versions 2020.013.20074 (and earlier), 2020.001.30018 (and earlier) and 2017.011.30188 (and earlier) are affected by an Integer Overflow vulnerability Affected: 17.0 through 17.011.30188; 20.0 through 20.001.300183 |
| CVE-2020-24437 | 7.8 | Nov 5 | Acrobat Reader DC versions 2020.012.20048 (and earlier), 2020.001.30005 (and earlier) and 2017.011.30175 (and earlier) are affected by a use-after-free vulnerability in the… Affected: through 20.001.30005 |
| CVE-2020-24436 | 7.8 | Nov 5 | Acrobat Pro DC versions 2020.012.20048 (and earlier), 2020.001.30005 (and earlier) and 2017.011.30175 (and earlier) are affected by an out-of-bounds write vulnerability that could… Affected: through 20.001.30005 |
| CVE-2020-24435 | 7.8 | Nov 5 | Acrobat Reader DC versions 2020.012.20048 (and earlier), 2020.001.30005 (and earlier) and 2017.011.30175 (and earlier) are affected by a heap-based buffer overflow vulnerability… Affected: through 20.001.30005 |
| CVE-2020-24433 | 7.8 | Nov 5 | Adobe Acrobat Reader DC versions 2020.012.20048 (and earlier), 2020.001.30005 (and earlier) and 2017.011.30175 (and earlier) are affected by a local privilege escalation… Affected: through 20.001.30005 |
| CVE-2020-24432 | 7.8 | Nov 5 | Acrobat Reader DC versions 2020.012.20048 (and earlier), 2020.001.30005 (and earlier) and 2017.011.30175 (and earlier) and Adobe Acrobat Pro DC 2017.011.30175 (and earlier) are… Affected: through 20.001.30005 |
| CVE-2020-24430 | 7.8 | Nov 5 | Acrobat Reader DC versions 2020.012.20048 (and earlier), 2020.001.30005 (and earlier) and 2017.011.30175 (and earlier) are affected by a use-after-free vulnerability when handling… Affected: through 20.001.30005 |
| CVE-2020-24429 | 7.8 | Nov 5 | Acrobat Reader DC versions 2020.012.20048 (and earlier), 2020.001.30005 (and earlier) and 2017.011.30175 (and earlier) for macOS are affected by a signature verification bypass… Affected: through 20.001.30005 |
| CVE-2016-0947 | 7.8 | Jan 14 | Untrusted search path vulnerability in Adobe Download Manager, as used in Adobe Reader and Acrobat before 11.0.14, Acrobat and Acrobat Reader DC Classic before 15.006.30119, and… Affected: through 11.0.13; 11.0.0; 11.0.1; 11.0.2; 11.0.3; 11.0.4; +8 more |
| CVE-2009-0658 | 7.8 | Feb 20 | Buffer overflow in Adobe Reader 9.0 and earlier, and Acrobat 9.0 and earlier, allows remote attackers to execute arbitrary code via a crafted PDF document, related to a… Affected: 7.0 through 7.1.1; 8.0 through 8.1.4; 9.0 |
| CVE-2020-24428 | 7.7 | Nov 5 | Acrobat Reader DC versions 2020.012.20048 (and earlier), 2020.001.30005 (and earlier) and 2017.011.30175 (and earlier) for macOS are affected by a time-of-check time-of-use… Affected: through 20.001.30005 |
| CVE-2024-34129 | 7.5 | Jun 13 | Acrobat Mobile Sign Android versions 24.4.2.33155 and earlier are affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that… Affected: before 24.5.0.33694 |
| CVE-2017-16366 | 7.5 | Dec 9 | An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versions, and 11.0.22 and… Affected: through 11.0.22; 17.0 through 17.011.30066 |
| CVE-2005-1306 | 7.5 | Jun 15 | The Adobe Reader control in Adobe Reader and Acrobat 7.0 and 7.0.1 allows remote attackers to determine the existence of files via Javascript containing XML script, aka the "XML… Affected: 7.0; 7.0.1 |
| CVE-2022-28247 | 7.3 | May 11 | Acrobat Reader DC version 22.001.2011x (and earlier), 20.005.3033x (and earlier) and 17.012.3022x (and earlier) are affected by an uncontrolled search path vulnerability that… Affected: 17.011.30059 through 17.012.30205; 20.001.30005 through 20.005.30314; 20.001.30005 through 20.005.30311 |
| CVE-2024-39425 | 7.0 | Aug 14 | Acrobat Reader versions 20.005.30636, 24.002.20965, 24.002.20964, 24.001.30123 and earlier are affected by a Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability that… Affected: 20.001.3005 before 20.005.30655 |
| CVE-2024-39420 | 7.0 | Aug 14 | Acrobat Reader versions 20.005.30636, 24.002.21005, 24.001.30159, 20.005.30655, 24.002.20965, 24.002.20964, 24.001.30123, 24.003.20054 and earlier are affected by a Time-of-check… Affected: 20.001.3005 before 20.005.30655 |
| CVE-2021-21057 | 6.6 | Feb 11 | Acrobat Reader DC versions versions 2020.013.20074 (and earlier), 2020.001.30018 (and earlier) and 2017.011.30188 (and earlier) are affected by a null pointer dereference… Affected: 17.0 through 17.011.30188; 20.0 through 20.001.300183 |
| CVE-2021-39856 | 6.5 | Sep 29 | Acrobat Reader DC ActiveX Control versions 2021.005.20060 (and earlier), 2020.004.30006 (and earlier) and 2017.011.30199 (and earlier) are affected by an Information Disclosure… Affected: 17.011.30059 through 17.011.30199; 20.001.30005 through 20.004.30006 |
| CVE-2021-39855 | 6.5 | Sep 29 | Acrobat Reader DC ActiveX Control versions 2021.005.20060 (and earlier), 2020.004.30006 (and earlier) and 2017.011.30199 (and earlier) are affected by an Information Disclosure… Affected: 17.011.30059 through 17.011.30199; 20.001.30005 through 20.004.30006 |
| CVE-2021-28555 | 6.5 | Sep 2 | Acrobat Reader DC versions versions 2021.001.20150 (and earlier), 2020.001.30020 (and earlier) and 2017.011.30194 (and earlier) are affected by an Out-of-bounds Read vulnerability Affected: 17.011.30059 through 17.011.30194; 20.001.30005 through 20.001.30020 |
| CVE-2021-28546 | 6.5 | Apr 1 | Acrobat Reader DC versions versions 2020.013.20074 (and earlier), 2020.001.30018 (and earlier) and 2017.011.30188 (and earlier) are missing support for an integrity check Affected: 17.011.30059 through 17.011.30188; 20.001.30005 through 20.001.30018 |
| CVE-2020-29075 | 6.5 | Feb 23 | Acrobat Reader DC versions 2020.013.20066 (and earlier), 2020.001.30010 (and earlier) and 2017.011.30180 (and earlier) are affected by an information exposure vulnerability, that… Affected: 17.011.30059 through 17.011.30180; 20.001.30005 through 20.001.30010 |
| CVE-2021-21042 | 6.5 | Feb 11 | Acrobat Reader DC versions 2020.013.20074 (and earlier), 2020.001.30018 (and earlier) and 2017.011.30188 (and earlier) are affected by an Out-of-bounds Read vulnerability that… Affected: 17.0 through 17.011.30188; 20.0 through 20.001.300183 |
| CVE-2018-4999 | 6.5 | Jul 9 | Adobe Acrobat and Reader versions 2018.009.20050 and earlier, 2017.011.30070 and earlier, and 2015.006.30394 and earlier have an Out-of-bounds read vulnerability Affected: 17.011.30059 through 17.011.30070 |
| CVE-2018-4914 | 6.5 | Feb 27 | An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 and earlier versions Affected: 17.0 through 17.011.30070 |
| CVE-2018-4912 | 6.5 | Feb 27 | An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 and earlier versions Affected: 17.0 through 17.011.30070 |
| CVE-2018-4909 | 6.5 | Feb 27 | An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 and earlier versions Affected: 17.0 through 17.011.30070 |
| CVE-2018-4908 | 6.5 | Feb 27 | An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 and earlier versions Affected: 17.0 through 17.011.30070 |
| CVE-2018-4907 | 6.5 | Feb 27 | An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 and earlier versions Affected: 17.0 through 17.011.30070 |
| CVE-2018-4906 | 6.5 | Feb 27 | An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 and earlier versions Affected: 17.0 through 17.011.30070 |
| CVE-2018-4905 | 6.5 | Feb 27 | An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 and earlier versions Affected: 17.0 through 17.011.30070 |
| CVE-2018-4903 | 6.5 | Feb 27 | An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 and earlier versions Affected: 17.0 through 17.011.30070 |
| CVE-2018-4900 | 6.5 | Feb 27 | An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 and earlier versions Affected: 17.0 through 17.011.30070 |
| CVE-2018-4899 | 6.5 | Feb 27 | An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 and earlier versions Affected: 17.0 through 17.011.30070 |
| CVE-2018-4897 | 6.5 | Feb 27 | An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 and earlier versions Affected: 17.0 through 17.011.30070 |
| CVE-2018-4896 | 6.5 | Feb 27 | An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 and earlier versions Affected: 17.0 through 17.011.30070 |
| CVE-2018-4894 | 6.5 | Feb 27 | An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 and earlier versions Affected: 17.0 through 17.011.30070 |
| CVE-2018-4893 | 6.5 | Feb 27 | An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 and earlier versions Affected: 17.0 through 17.011.30070 |
| CVE-2018-4891 | 6.5 | Feb 27 | An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 and earlier versions Affected: 17.0 through 17.011.30070 |
| CVE-2018-4889 | 6.5 | Feb 27 | An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 and earlier versions Affected: 17.0 through 17.011.30070 |
| CVE-2018-4887 | 6.5 | Feb 27 | An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 and earlier versions Affected: 17.0 through 17.011.30070 |
| CVE-2018-4886 | 6.5 | Feb 27 | An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 and earlier versions Affected: 17.0 through 17.011.30070 |
| CVE-2018-4885 | 6.5 | Feb 27 | An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 and earlier versions Affected: 17.0 through 17.011.30070 |
| CVE-2018-4884 | 6.5 | Feb 27 | An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 and earlier versions Affected: 17.0 through 17.011.30070 |
| CVE-2018-4883 | 6.5 | Feb 27 | An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 and earlier versions Affected: 17.0 through 17.011.30070 |
| CVE-2018-4882 | 6.5 | Feb 27 | An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 and earlier versions Affected: 17.0 through 17.011.30070 |
| CVE-2018-4881 | 6.5 | Feb 27 | An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 and earlier versions Affected: 17.0 through 17.011.30070 |
The 500 most important CVEs for this product (exploited first, then by severity)