AC
Product
Acrobat
On CISA KEVExploited in the wildRansomware-linked
1,415
CVEs
25
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 219High 281Medium 0Low 0
Watch
Add Acrobat to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-81992 | 7.8 | Sep 8 | Acrobat Reader | Heap-based Buffer Overflow (CWE-122) Affected: 24.001.20604 before 24.001.30429 |
| CVE-2026-81983 | 7.8 | Sep 8 | Acrobat Reader | Out-of-bounds Write (CWE-787) Affected: 24.001.20604 before 24.001.30429 |
| CVE-2026-81975 | 7.8 | Sep 8 | Acrobat Reader | Use After Free (CWE-416) Affected: 24.001.20604 before 24.001.30429 |
| CVE-2026-79908 | 7.8 | Sep 8 | Acrobat Reader | Out-of-bounds Write (CWE-787) Affected: 24.001.20604 before 24.001.30429 |
| CVE-2026-48373 | 7.8 | Jul 17 | Acrobat Reader | Heap-based Buffer Overflow (CWE-122) Affected: before 24.001.30383 |
| CVE-2026-47965 | 7.8 | Jun 12 | Acrobat Reader | Out-of-bounds Write (CWE-787) Affected: 24.0.0 before 24.001.30365 |
| CVE-2026-47916 | 7.8 | Jun 9 | Acrobat Reader | Use After Free (CWE-416) Affected: 24.0.0 before 24.001.30383 |
| CVE-2026-47918 | 7.8 | Jun 9 | Acrobat Reader | Use After Free (CWE-416) Affected: 24.0.0 before 24.001.30383 |
| CVE-2026-47915 | 7.8 | Jun 9 | Acrobat Reader | Use After Free (CWE-416) Affected: 24.0.0 before 24.001.30383 |
| CVE-2026-47952 | 7.8 | Jun 9 | Acrobat Reader | Heap-based Buffer Overflow (CWE-122) Affected: 24.0.0 before 24.001.30383 |
| CVE-2026-47917 | 7.8 | Jun 9 | Acrobat Reader | Use After Free (CWE-416) Affected: 24.0.0 before 24.001.30383 |
| CVE-2026-47955 | 7.8 | Jun 9 | Acrobat Reader | Use After Free (CWE-416) Affected: 24.0.0 before 24.001.30383 |
| CVE-2026-47919 | 7.8 | Jun 9 | Acrobat Reader | Use After Free (CWE-416) Affected: 24.0.0 before 24.001.30383 |
| CVE-2026-47921 | 7.8 | Jun 9 | Acrobat Reader | Use After Free (CWE-416) Affected: 24.0.0 before 24.001.30383 |
| CVE-2026-47920 | 7.8 | Jun 9 | Acrobat Reader | Use After Free (CWE-416) Affected: 24.0.0 before 24.001.30383 |
| CVE-2026-47913 | 7.8 | Jun 9 | Acrobat Reader | Use After Free (CWE-416) Affected: before 24.001.30383; before 26.001.21662 |
| CVE-2026-47914 | 7.8 | Jun 9 | Acrobat Reader | Use After Free (CWE-416) Affected: before 24.001.30383; before 26.001.21662 |
| CVE-2026-47912 | 7.8 | Jun 9 | Acrobat Reader | Use After Free (CWE-416) Affected: before 24.001.30383; before 26.001.21662 |
| CVE-2026-47959 | 7.8 | Jun 9 | Acrobat Reader | Stack-based Buffer Overflow (CWE-121) Affected: before 24.001.30383; before 26.001.21662 |
| CVE-2026-47911 | 7.8 | Jun 9 | Acrobat Reader | Out-of-bounds Write (CWE-787) Affected: before 24.001.30383; before 26.001.21662 |
| CVE-2026-27278 | 7.8 | Mar 10 | Acrobat Reader | Use After Free (CWE-416) Affected: 24.001.20604 before 24.001.30356 |
| CVE-2026-27220 | 7.8 | Mar 10 | Acrobat Reader | Use After Free (CWE-416) Affected: 24.001.20604 before 24.001.30356 |
| CVE-2025-64899 | 7.8 | Dec 9 | Acrobat Reader | Out-of-bounds Read (CWE-125) Affected: 20.001.3005 before 20.005.30838; 24.001.20604 before 24.001.30307; 24.001.20604 before 24.001.30308 |
| CVE-2025-64785 | 7.8 | Dec 9 | Acrobat Reader | Untrusted Search Path (CWE-426) Affected: 20.001.3005 before 20.005.30838; 24.001.20604 before 24.001.30307; 24.001.20604 before 24.001.30308 |
| CVE-2025-54257 | 7.8 | Sep 9 | Acrobat Reader | Use After Free (CWE-416) Affected: 24.0.0 before 24.001.30264; 20.001.30002 before 20.005.30793; 20.001.30002 before 20.005.30791 |
| CVE-2025-43577 | 7.8 | Jun 10 | Acrobat Reader versions 24.001.30235, 20.005.30763, 25.001.20521 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the… Affected: 20.001.30002 before 20.005.30774; 24.0.0 before 24.001.30254 |
| CVE-2025-43576 | 7.8 | Jun 10 | Acrobat Reader versions 24.001.30235, 20.005.30763, 25.001.20521 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the… Affected: 20.001.30002 before 20.005.30774; 24.0.0 before 24.001.30254 |
| CVE-2025-43575 | 7.8 | Jun 10 | Acrobat Reader versions 24.001.30235, 20.005.30763, 25.001.20521 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in… Affected: 20.001.30002 before 20.005.30774; 24.0.0 before 24.001.30254 |
| CVE-2025-43574 | 7.8 | Jun 10 | Acrobat Reader versions 24.001.30235, 20.005.30763, 25.001.20521 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the… Affected: 20.001.30002 before 20.005.30774; 24.0.0 before 24.001.30254 |
| CVE-2025-43573 | 7.8 | Jun 10 | Acrobat Reader versions 24.001.30235, 20.005.30763, 25.001.20521 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the… Affected: 20.001.30002 before 20.005.30774; 24.0.0 before 24.001.30254 |
| CVE-2025-43550 | 7.8 | Jun 10 | Acrobat Reader versions 24.001.30235, 20.005.30763, 25.001.20521 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the… Affected: 20.001.30002 before 20.005.30774; 24.0.0 before 24.001.30254 |
| CVE-2025-27174 | 7.8 | Mar 11 | Acrobat Reader versions 24.001.30225, 20.005.30748, 25.001.20428 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the… Affected: 20.001.30002 before 20.005.30763; 24.0.0 before 24.001.30235 |
| CVE-2025-27162 | 7.8 | Mar 11 | Acrobat Reader versions 24.001.30225, 20.005.30748, 25.001.20428 and earlier are affected by an Access of Uninitialized Pointer vulnerability that could result in arbitrary code… Affected: 20.001.30002 before 20.005.30763; 24.0.0 before 24.001.30235 |
| CVE-2025-27161 | 7.8 | Mar 11 | Acrobat Reader versions 24.001.30225, 20.005.30748, 25.001.20428 and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in… Affected: 20.001.30002 before 20.005.30763; 24.0.0 before 24.001.30235 |
| CVE-2025-27160 | 7.8 | Mar 11 | Acrobat Reader versions 24.001.30225, 20.005.30748, 25.001.20428 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the… Affected: 20.001.30002 before 20.005.30763; 24.0.0 before 24.001.30235 |
| CVE-2025-27159 | 7.8 | Mar 11 | Acrobat Reader versions 24.001.30225, 20.005.30748, 25.001.20428 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the… Affected: 20.001.30002 before 20.005.30763; 24.0.0 before 24.001.30235 |
| CVE-2025-27158 | 7.8 | Mar 11 | Acrobat Reader versions 24.001.30225, 20.005.30748, 25.001.20428 and earlier are affected by an Access of Uninitialized Pointer vulnerability that could result in arbitrary code… Affected: 20.001.30002 before 20.005.30763; 24.0.0 before 24.001.30235 |
| CVE-2022-44518 | 7.8 | Dec 18 | Acrobat Reader | Use After Free (CWE-416) Affected: 17.011.30059 through 17.012.30205; 20.001.30005 through 20.005.30314; 20.001.30005 through 20.005.30311 |
| CVE-2022-44512 | 7.8 | Dec 18 | Acrobat Reader | Out-of-bounds Write (CWE-787) Affected: 17.011.30059 through 17.012.30205; 20.001.30005 through 20.005.30314; 20.001.30005 through 20.005.30311 |
| CVE-2022-44520 | 7.8 | Dec 18 | Acrobat Reader | Use After Free (CWE-416) Affected: 17.011.30059 through 17.012.30205; 20.001.30005 through 20.005.30314; 20.001.30005 through 20.005.30311 |
| CVE-2022-44513 | 7.8 | Dec 18 | Acrobat Reader | Out-of-bounds Write (CWE-787) Affected: 17.011.30059 through 17.012.30205; 20.001.30005 through 20.005.30314; 20.001.30005 through 20.005.30311 |
| CVE-2022-44514 | 7.8 | Dec 18 | Acrobat Reader | Use After Free (CWE-416) Affected: 17.011.30059 through 17.012.30205; 20.001.30005 through 20.005.30314; 20.001.30005 through 20.005.30311 |
| CVE-2024-49530 | 7.8 | Dec 10 | Acrobat Reader versions 24.005.20307, 24.001.30213, 24.001.30193, 20.005.30730, 20.005.30710 and earlier are affected by a Use After Free vulnerability that could result in… Affected: before 20.005.30748; 24.0 before 24.001.30225 |
| CVE-2024-45112 | 7.8 | Sep 13 | Acrobat Reader versions 24.002.21005, 24.001.30159, 20.005.30655, 24.003.20054 and earlier are affected by a Type Confusion vulnerability that could result in arbitrary code… Affected: before 20.005.30680; 24.001.0 before 24.001.30187 |
| CVE-2024-41869 | 7.8 | Sep 13 | Acrobat Reader versions 24.002.21005, 24.001.30159, 20.005.30655, 24.003.20054 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code… Affected: before 20.005.30680; 24.001.0 before 24.001.30187 |
| CVE-2024-41831 | 7.8 | Aug 14 | Acrobat Reader versions 20.005.30636, 24.002.20965, 24.002.20964, 24.001.30123 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code… Affected: 20.001.30005 before 20.005.30655; 24.001.20604 before 24.001.30159 |
| CVE-2024-41830 | 7.8 | Aug 14 | Acrobat Reader versions 20.005.30636, 24.002.20965, 24.002.20964, 24.001.30123 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code… Affected: 20.001.30005 before 20.005.30655; 24.001.20604 before 24.001.30159 |
| CVE-2024-39426 | 7.8 | Aug 14 | Acrobat Reader versions 20.005.30636, 24.002.20965, 24.002.20964, 24.001.30123 and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which… Affected: 20.001.30005 before 20.005.30655; 24.001.20604 before 24.001.30159 |
| CVE-2024-39424 | 7.8 | Aug 14 | Acrobat Reader versions 20.005.30636, 24.002.20965, 24.002.20964, 24.001.30123 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code… Affected: 20.001.30005 before 20.005.30655; 24.001.20604 before 24.001.30159 |
| CVE-2024-39423 | 7.8 | Aug 14 | Acrobat Reader versions 20.005.30636, 24.002.20965, 24.002.20964, 24.001.30123 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code… Affected: 20.001.30005 before 20.005.30655; 24.001.20604 before 24.001.30159 |
The 500 most important CVEs for this product (exploited first, then by severity)