Priority CRITICAL 100KEV
Adobe Reader and Acrobat 10.x before 10.1.11 and 11.x before 11.0.08 on Windows allow attackers to bypass a sandbox protection mechanism, and consequently execute native code in a privileged context, via unspecified vect…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.2233 · Published 2014-08-12 · No fix listed
Priority CRITICAL 100KEV
Adobe Reader and Acrobat 9.x before 9.5.5, 10.x before 10.1.7, and 11.x before 11.0.03 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulne…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.78913 · Published 2013-08-30 · Fixed CWE-787
Priority CRITICAL 100KEV
Integer overflow in Adobe Reader and Acrobat 9.x before 9.5.5, 10.x before 10.1.7, and 11.x before 11.0.03 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2013-2727.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.66555 · Published 2013-05-16 · Fixed CWE-190
Priority CRITICAL 100KEV
Unspecified vulnerability in the U3D component in Adobe Reader and Acrobat 10.1.1 and earlier on Windows and Mac OS X, and Adobe Reader 9.x through 9.4.6 on UNIX, allows remote attackers to execute arbitrary code or caus…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.88581 · Published 2011-12-07 · Fixed CWE-787
Priority CRITICAL 97KEV
Acrobat Reader DC versions versions 2021.001.20150 (and earlier), 2020.001.30020 (and earlier) and 2017.011.30194 (and earlier) are affected by a Use After Free vulnerability.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.52132 · Published 2021-09-02 · No fix listed CWE-416
Priority CRITICAL 97KEV
Acrobat Reader DC versions versions 2020.013.20074 (and earlier), 2020.001.30018 (and earlier) and 2017.011.30188 (and earlier) are affected by a heap-based buffer overflow vulnerability.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.86326 · Published 2021-02-11 · No fix listed CWE-122
Priority CRITICAL 97KEV
Adobe Flash Player before 10.2.154.27 on Windows, Mac OS X, Linux, and Solaris and 10.2.156.12 and earlier on Android; Adobe AIR before 2.6.19140; and Authplay.dll (aka AuthPlayLib.bundle) in Adobe Reader 9.x before 9.4.…
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.9941 · Published 2011-04-13 · Fixed CWE-843
Priority CRITICAL 97KEV
Heap-based buffer overflow in Adobe Reader and Acrobat 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2 allows remote attackers to execute arbitrary code via a crafted PDF file that triggers memory corruption, as e…
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.86531 · Published 2009-10-13 · Fixed CWE-122
Priority CRITICAL 97KEV
Stack-based buffer overflow in Adobe Reader and Adobe Acrobat 9 before 9.1, 8 before 8.1.3 , and 7 before 7.1.1 allows remote attackers to execute arbitrary code via a crafted argument to the getIcon method of a Collab o…
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.96632 · Published 2009-03-19 · Fixed CWE-121
Priority CRITICAL 97KEV
Multiple unspecified vulnerabilities in Adobe Reader and Acrobat before 8.1.2 have unknown impact and attack vectors.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.37871 · Published 2008-02-07 · Fixed CWE-200
Priority CRITICAL 93KEV
Acrobat Reader versions 23.003.20284 (and earlier), 20.005.30516 (and earlier) and 20.005.30514 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the cont…
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.07458 · Published 2023-09-13 · No fix listed CWE-787
Priority CRITICAL 93KEV
Adobe Acrobat Reader versions 22.003.20282 (and earlier), 22.003.20281 (and earlier) and 20.005.30418 (and earlier) are affected by a Use After Free vulnerability that could result in arbitrary code execution in the cont…
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.59427 · Published 2023-01-18 · No fix listed CWE-416
Priority CRITICAL 93KEV
Buffer overflow in Adobe Reader and Acrobat 9.x before 9.5.4, 10.x before 10.1.6, and 11.x before 11.0.02 allows remote attackers to execute arbitrary code via a crafted PDF document, as exploited in the wild in February…
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.32346 · Published 2013-02-14 · Fixed CWE-120
Priority CRITICAL 93KEV
Adobe Reader and Acrobat 9.x before 9.5.4, 10.x before 10.1.6, and 11.x before 11.0.02 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted PDF document, as expl…
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.86927 · Published 2013-02-14 · Fixed CWE-787
Priority CRITICAL 93KEV
Unspecified vulnerability in Adobe Flash Player 10.2.154.13 and earlier on Windows, Mac OS X, Linux, and Solaris; 10.1.106.16 and earlier on Android; Adobe AIR 2.5.1 and earlier; and Authplay.dll (aka AuthPlayLib.bundle)…
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.63507 · Published 2011-03-15 · Fixed
Priority CRITICAL 93KEV
Unspecified vulnerability in Adobe Reader and Acrobat 8.x before 8.2.1 and 9.x before 9.3.1 allows attackers to cause a denial of service (application crash) or possibly execute arbitrary code via unknown vectors.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.88246 · Published 2010-02-21 · Fixed
Priority CRITICAL 93KEV
Use-after-free vulnerability in the Doc.media.newPlayer method in Multimedia.api in Adobe Reader and Acrobat 9.x before 9.3, and 8.x before 8.2 on Windows and Mac OS X, allows remote attackers to execute arbitrary code v…
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.8188 · Published 2009-12-15 · Fixed CWE-416
Priority CRITICAL 93KEV
Unspecified vulnerability in Adobe Reader and Acrobat 9.x through 9.1.2, and Adobe Flash Player 9.x through 9.0.159.0 and 10.x through 10.0.22.87, allows remote attackers to execute arbitrary code or cause a denial of se…
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.21198 · Published 2009-07-23 · Fixed CWE-787
Priority CRITICAL 93KEV
Stack-based buffer overflow in Adobe Acrobat and Reader 8.1.2 and earlier allows remote attackers to execute arbitrary code via a PDF file that calls the util.printf JavaScript function with a crafted format string argum…
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.99793 · Published 2008-11-04 · Fixed CWE-787
Priority CRITICAL 93KEV
Multiple buffer overflows in Adobe Reader and Acrobat 8.1.1 and earlier allow remote attackers to execute arbitrary code via a PDF file with long arguments to unspecified JavaScript methods.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.87423 · Published 2008-02-12 · Fixed CWE-120
Priority CRITICAL 91KEV
Stack-based buffer overflow in CoolType.dll in Adobe Reader and Acrobat 9.x before 9.4, and 8.x before 8.2.5 on Windows and Mac OS X, allows remote attackers to execute arbitrary code or cause a denial of service (applic…
CVSS 3.1HIGH 7.3· Local · Low privileges · User interaction · EPSS 0.81376 · Published 2010-09-09 · Fixed CWE-787
Priority HIGH 83
Buffer overflow in Adobe Reader and Acrobat 9.x before 9.5.5, 10.x before 10.1.7, and 11.x before 11.0.03 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2013-2733.
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.78757 · Published 2013-05-16 · Fixed CWE-119
Priority HIGH 78
Adobe Reader and Acrobat 9.x before 9.3.3, and 8.x before 8.2.3 on Windows and Mac OS X, do not restrict the contents of one text field in the Launch File warning dialog, which makes it easier for remote attackers to tri…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.73617 · Published 2010-04-05 · Fixed CWE-264
Priority HIGH 77
Adobe Flash Player before 9.0.289.0 and 10.x before 10.1.102.64 on Windows, Mac OS X, Linux, and Solaris and 10.1.95.1 on Android, and authplay.dll (aka AuthPlayLib.bundle or libauthplay.so.0.0.0) in Adobe Reader and Acr…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.69679 · Published 2010-10-29 · Fixed CWE-119
Priority HIGH 77
Array index error in Adobe Reader and Acrobat 9.x before 9.2, 8.x before 8.1.7, and possibly 7.x through 7.1.4 might allow attackers to execute arbitrary code via unspecified vectors.
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.6857 · Published 2009-10-19 · Fixed CWE-189
Load more