CVE Vulnerability Advisory Database

[Affected Scope] Adobe Acrobat Reader versions 24.001.30356, 26.001.21367 and earlier

[Impact] Successful exploitation allows arbitrary code execution in the context of the current user when a victim opens a specially crafted malicious PDF file

[Mitigation] Immediately apply the official Adobe security update (APSB26-43) and restrict opening untrusted PDF documents

[Affected Scope] Adobe Acrobat and Reader versions 23.003.20284 (and earlier), 20.005.30516 (and earlier), and 20.005.30514 (and earlier)

[Impact] Successful exploitation allows arbitrary code execution in the context of the current user when a victim opens a specially crafted malicious PDF file

[Mitigation] Immediately apply the official security patches provided by Adobe and restrict opening untrusted PDF documents

[Affected Scope] Adobe Acrobat and Reader versions 22.003.20282 (and earlier), 22.003.20281 (and earlier), and 20.005.30418 (and earlier)

[Impact] Successful exploitation could lead to arbitrary code execution in the context of the current user when a victim opens a crafted malicious PDF

[Mitigation] Immediately apply the official Adobe security patches to upgrade to the latest secure versions

[Affected Scope] Adobe Acrobat and Reader versions 2020.009.20074 and earlier, 2020.001.30002, 2017.011.30171 and earlier, and 2015.006.30523 and earlier

[Impact] Successful exploitation of this Use-After-Free vulnerability allows remote attackers to execute arbitrary code in the context of the current user by tricking them into opening a specially crafted PDF file

[Mitigation] Immediately apply the official Adobe security patch (APSB20-48) and restrict opening PDF files from untrusted sources

[Affected Scope] Adobe Acrobat and Reader versions 2018.011.20038 and earlier, 2017.011.30079 and earlier, and 2015.006.30417 and earlier

[Impact] Successful exploitation allows remote attackers to execute arbitrary code within the context of the current user session

[Mitigation] Immediately apply the official Adobe security updates (APSB18-09) to patch the vulnerability

[Affected Scope] Adobe Reader and Acrobat 10.x before 10.1.11 and 11.x before 11.0.08 on Windows operating systems.

[Impact] Attackers can bypass the sandbox protection mechanism and execute arbitrary native code in a privileged context.

[Mitigation] Immediately upgrade affected installations to patched versions 10.1.11, 11.0.08, or later.

[Affected Scope] Adobe Reader and Acrobat 10.1.1 and earlier on Windows and Mac OS X, and Adobe Reader 9.x through 9.4.6 on UNIX

[Impact] Remote attackers can execute arbitrary code or cause a denial of service (memory corruption) via a specially crafted PDF document containing malicious U3D data

[Mitigation] Apply the official security patches immediately, or disable the vulnerable U3D parsing component (rt3d.dll) as a temporary workaround

[Affected Scope] Adobe Flash Player 10.2.154.13 and earlier (Windows, macOS, Linux, Solaris), Flash Player for Android 10.1.106.16 and earlier, Adobe AIR 2.5.1 and earlier, and Authplay component in Adobe Reader/Acrobat 9.x through 9.4.2 and 10.x through 10.0.1

[Impact] Remote attackers can execute arbitrary code or cause a denial of service (application crash) by tricking users into opening crafted Flash content (.swf), often embedded in Excel spreadsheets or malicious web pages

[Mitigation] Immediately upgrade affected Adobe products to patched versions, or completely uninstall/disable Flash Player and the Authplay.dll component on legacy systems

[Affected Scope] Adobe Reader and Acrobat 9.x before 9.4, and 8.x before 8.2.5 on Windows and Mac OS X

[Impact] Remote attackers can execute arbitrary code or cause a denial of service (application crash) via a crafted PDF document containing a long field in a SING table of a TTF font

[Mitigation] Immediately upgrade Adobe Reader and Acrobat to patched versions (9.4 / 8.2.5 or later) and restrict opening untrusted PDF attachments

[Affected Scope] Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64; Adobe AIR before 2.0.2.12610; and Adobe Reader/Acrobat 9.x before 9.3.3 and 8.x before 8.2.3 on Windows and Mac OS X

[Impact] Successful exploitation allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted SWF content

[Mitigation] Immediately upgrade all affected Adobe products to the latest patched versions, or disable/rename the vulnerable authplay.dll component

[Affected Scope] Adobe Reader and Acrobat 9.x before 9.3, 8.x before 8.2, and 7.x before 7.1.4 on Windows and Mac OS X

[Impact] Remote attackers can execute arbitrary code or cause a denial of service (application crash) via a crafted PDF document containing malformed U3D data

[Mitigation] Apply the official vendor security patches immediately, or disable 3D/U3D rendering features via registry policies

[Affected Scope] Adobe Reader and Acrobat 9.x before 9.3, and 8.x before 8.2 on Windows and Mac OS X

[Impact] Remote attackers can execute arbitrary code on the target system by tricking a user into opening a specially crafted PDF file

[Mitigation] Immediately upgrade to patched versions (9.3 / 8.2 or higher) and restrict execution of untrusted PDF files

[Affected Scope] Adobe Reader and Acrobat versions 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2

[Impact] Remote attackers can execute arbitrary code and compromise the host system by tricking a user into opening a specially crafted PDF file

[Mitigation] Immediately upgrade to the patched versions (7.1.4, 8.1.7, or 9.2 and above) and restrict opening untrusted PDF attachments

[Affected Scope] Adobe Reader and Acrobat 9.x through 9.1.2, and Adobe Flash Player 9.x through 9.0.159.0 and 10.x through 10.0.22.87

[Impact] Remote attackers can execute arbitrary code or cause a denial of service (memory corruption) via a crafted Flash application in a .pdf file or a crafted .swf file

[Mitigation] Immediately upgrade to the latest patched versions, or apply workarounds such as disabling or renaming the authplay.dll component to prevent exploitation

[Affected Scope] Adobe Reader and Acrobat 8.1.1 and earlier

[Impact] Remote attackers can execute arbitrary code via a specially crafted PDF file containing malicious JavaScript

[Mitigation] Upgrade to the latest patched version or disable JavaScript execution within Adobe Reader/Acrobat

[Affected Scope] Adobe Reader and Acrobat versions prior to 8.1.2 across all platforms

[Impact] Remote attackers can execute arbitrary code or cause information disclosure by tricking users into opening a specially crafted PDF document

[Mitigation] Immediately upgrade to Adobe Reader/Acrobat version 8.1.2 or later, or transition to the latest supported Acrobat Reader DC