Read the docs

Adobe

Records8047All Threatist records
Exploited (KEV)83In CISA KEV
CVSS critical1940CVSS 9.0–10.0
CVSS high3102CVSS 7.0–8.9

Exploited now

Adobe records in CISA KEV

Components

Products in the NVD configurations · select one to filter the records

Records

1414 records in Acrobat · all components

Priority CRITICAL 100KEV

Adobe Reader and Acrobat 10.x before 10.1.11 and 11.x before 11.0.08 on Windows allow attackers to bypass a sandbox protection mechanism, and consequently execute native code in a privileged context, via unspecified vect…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.2233 Published 2014-08-12 No fix listed
Priority CRITICAL 100KEV

Adobe Reader and Acrobat 9.x before 9.5.5, 10.x before 10.1.7, and 11.x before 11.0.03 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulne…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.78913 Published 2013-08-30 Fixed CWE-787
Priority CRITICAL 100KEV

Unspecified vulnerability in the U3D component in Adobe Reader and Acrobat 10.1.1 and earlier on Windows and Mac OS X, and Adobe Reader 9.x through 9.4.6 on UNIX, allows remote attackers to execute arbitrary code or caus…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.88581 Published 2011-12-07 Fixed CWE-787
Priority CRITICAL 97KEV

Adobe Flash Player before 10.2.154.27 on Windows, Mac OS X, Linux, and Solaris and 10.2.156.12 and earlier on Android; Adobe AIR before 2.6.19140; and Authplay.dll (aka AuthPlayLib.bundle) in Adobe Reader 9.x before 9.4.…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.9941 Published 2011-04-13 Fixed CWE-843
Priority CRITICAL 97KEV

Heap-based buffer overflow in Adobe Reader and Acrobat 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2 allows remote attackers to execute arbitrary code via a crafted PDF file that triggers memory corruption, as e…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.86531 Published 2009-10-13 Fixed CWE-122
Priority CRITICAL 96KEV

Acrobat Reader versions 24.001.30356, 26.001.21367 and earlier are affected by an Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') vulnerability that could result in arbitrary cod…

CVSS 3.1HIGH 8.6 Local No auth User interaction EPSS 0.0723 Published 2026-04-11 Fixed in 26.001.21411, 24.001.30362 (Win) +1 CWE-1321
Priority CRITICAL 93KEV

Acrobat Reader versions 23.003.20284 (and earlier), 20.005.30516 (and earlier) and 20.005.30514 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the cont…

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.07458 Published 2023-09-13 No fix listed CWE-787
Priority CRITICAL 93KEV

Adobe Acrobat Reader versions 22.003.20282 (and earlier), 22.003.20281 (and earlier) and 20.005.30418 (and earlier) are affected by a Use After Free vulnerability that could result in arbitrary code execution in the cont…

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.59427 Published 2023-01-18 No fix listed CWE-416
Priority CRITICAL 93KEV

Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64; Adobe AIR before 2.0.2.12610; and Adobe Reader and Acrobat 9.x before 9.3.3, and 8.x before 8.2.3 on Windows and Mac OS X, allow remote attackers to execute…

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.82531 Published 2010-06-08 Fixed CWE-787
Priority CRITICAL 91KEV

Stack-based buffer overflow in CoolType.dll in Adobe Reader and Acrobat 9.x before 9.4, and 8.x before 8.2.5 on Windows and Mac OS X, allows remote attackers to execute arbitrary code or cause a denial of service (applic…

CVSS 3.1HIGH 7.3 Local Low privileges User interaction EPSS 0.81376 Published 2010-09-09 Fixed CWE-787
Load more
Open these records in search →