Read the docs

Adobe

Records8047All Threatist records
Exploited (KEV)83In CISA KEV
CVSS critical1940CVSS 9.0–10.0
CVSS high3102CVSS 7.0–8.9

Exploited now

Adobe records in CISA KEV
TI-2026-35762 Adobe Commerce and Magento Unrestricted Upload of File with Dangerous Type Vulnerability Priority CRITICAL 99KEV 2026-10-27TI-2026-50010 Adobe Commerce and Magento Incorrect Authorization Vulnerability Priority CRITICAL 98KEV 2026-09-24TI-2026-52938 Adobe Commerce and Magento Improper Neutralization of Special Elements Used in a Template Engine Vulnerability Priority CRITICAL 100KEV 2026-09-08TI-2026-35688 Adobe ColdFusion Path Traversal Vulnerability Priority CRITICAL 100KEV 2026-07-07TI-2009-03297 Adobe Acrobat and Reader Heap-Based Buffer Overflow Vulnerability Priority CRITICAL 97KEV 2026-05-20TI-2020-07801 Adobe Acrobat Use-After-Free Vulnerability Priority CRITICAL 93KEV 2026-04-13

Components

Products in the NVD configurations · select one to filter the records
Acrobat Dc 1832 records CRITICAL Acrobat Reader Dc 1832 records CRITICAL Acrobat 1414 records CRITICAL Experience Manager 1299 records HIGH Acrobat Reader 1085 records CRITICAL Flash Player 1084 records CRITICAL Air 413 records CRITICAL Air Sdk 409 records CRITICAL

Records

1832 records in Acrobat Reader Dc · all components

TI-2026-26867 CVE-2026-34621 · GHSA-vcqh-932g-m3qj

Acrobat Reader | Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') (CWE-1321)

Priority CRITICAL 96KEV

Acrobat Reader versions 24.001.30356, 26.001.21367 and earlier are affected by an Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') vulnerability that could result in arbitrary cod…

CVSS 3.1HIGH 8.6 Local No auth User interaction EPSS 0.0723 Published 2026-04-11 Fixed in 26.001.21411, 24.001.30362 (Win) +1 CWE-1321
TI-2023-11518 CVE-2023-26369 · GHSA-pxpg-54ph-g5gh

[Google Project Zero] Adobe Acrobat DC OOBW 0-day actively exploited in the wild

Priority CRITICAL 93KEV

Acrobat Reader versions 23.003.20284 (and earlier), 20.005.30516 (and earlier) and 20.005.30514 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the cont…

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.07458 Published 2023-09-13 No fix listed CWE-787
TI-2023-07999 CVE-2023-21608 · GHSA-w7q6-mhgp-7c2h

Adobe Acrobat Reader DC resetForm Use-After-Free Remote Code Execution Vulnerability

Priority CRITICAL 93KEV

Adobe Acrobat Reader versions 22.003.20282 (and earlier), 22.003.20281 (and earlier) and 20.005.30418 (and earlier) are affected by a Use After Free vulnerability that could result in arbitrary code execution in the cont…

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.59427 Published 2023-01-18 No fix listed CWE-416
TI-2020-07801 CVE-2020-9715 · GHSA-wxg9-xx37-xj49

Use after free in Adobe Acrobat and Reader

Priority CRITICAL 93KEV

Adobe Acrobat and Reader versions 2020.009.20074 and earlier, 2020.001.30002, 2017.011.30171 and earlier, and 2015.006.30523 and earlier have an use-after-free vulnerability.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.33256 Published 2020-08-19 No fix listed CWE-416
TI-2021-17074 CVE-2021-39843 · GHSA-gxxm-62f6-2gc2

Adobe Acrobat Reader XObject Out-of-Bound Write Vulnerability

Priority HIGH 73

Acrobat Reader DC versions 2021.005.20060 (and earlier), 2020.004.30006 (and earlier) and 2017.011.30199 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in…

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.76678 Published 2021-09-29 No fix listed CWE-787
TI-2021-17067 CVE-2021-39836 · GHSA-742p-c75r-3hmv

Adobe Acrobat Reader DC AcroForm buttonGetIcon Use-After-Free Remote Code Execution Vulnerability

Priority HIGH 71

Acrobat Reader DC versions 2021.005.20060 (and earlier), 2020.004.30006 (and earlier) and 2017.011.30199 (and earlier) are affected by a use-after-free vulnerability in the processing of the AcroForm buttonGetIcon action…

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.69538 Published 2021-09-29 No fix listed CWE-416
TI-2019-05031 CVE-2019-7111 · GHSA-f46p-jp87-7xp4

Out-of-bounds write in Adobe Acrobat and Reader

Priority HIGH 71

Adobe Acrobat and Reader versions 2019.010.20098 and earlier, 2019.010.20098 and earlier, 2017.011.30127 and earlier version, and 2015.006.30482 and earlier have an out-of-bounds write vulnerability.

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.55742 Published 2019-05-23 No fix listed CWE-787
TI-2021-17070 CVE-2021-39839 · GHSA-8gj7-p588-576j

Adobe Acrobat Reader DC AcroForm getItemAt Use-After-Free Remote Code Execution Vulnerability

Priority HIGH 70

Acrobat Reader DC versions 2021.005.20060 (and earlier), 2020.004.30006 (and earlier) and 2017.011.30199 (and earlier) are affected by a use-after-free vulnerability in the processing of the AcroForm getItem action that…

CVSS 3.0HIGH 7.8 Local No auth User interaction EPSS 0.65249 Published 2021-09-29 No fix listed CWE-416
TI-2021-17069 CVE-2021-39838 · GHSA-8ppm-g67x-pcr3

Adobe Acrobat Reader DC AcroForm buttonGetCaption Use-After-Free Remote Code Execution Vulnerability

Priority HIGH 70

Acrobat Reader DC versions 2021.005.20060 (and earlier), 2020.004.30006 (and earlier) and 2017.011.30199 (and earlier) are affected by a use-after-free vulnerability in the processing of the AcroForm buttonGetCaption act…

CVSS 3.0HIGH 7.8 Local No auth User interaction EPSS 0.65249 Published 2021-09-29 No fix listed CWE-416
TI-2021-17068 CVE-2021-39837 · GHSA-xpqm-h22m-6vxm

Adobe Acrobat Reader DC AcroForm deleteItemAt Use-After-Free Remote Code Execution Vulnerability

Priority HIGH 70

Acrobat Reader DC versions 2021.005.20060 (and earlier), 2020.004.30006 (and earlier) and 2017.011.30199 (and earlier) are affected by a use-after-free vulnerability in the processing of the AcroForm deleteItemAt action…

CVSS 3.0HIGH 7.8 Local No auth User interaction EPSS 0.65249 Published 2021-09-29 No fix listed CWE-416
TI-2019-05726 CVE-2019-8050 · GHSA-jc59-g3q9-qwjw

Out-of-bounds write in Adobe Acrobat and Reader

Priority HIGH 70

Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and earlier, 2015.006.30497 and earlier, and 2015.006.30498 and earlier have a heap ove…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.40626 Published 2019-08-20 No fix listed CWE-787
TI-2018-11472 CVE-2018-16042 · GHSA-vpxh-p969-8368

Adobe Acrobat and Reader versions 2019.008.20081 and earlier, 2019.008.20080 and earlier…

Priority HIGH 70

Adobe Acrobat and Reader versions 2019.008.20081 and earlier, 2019.008.20080 and earlier, 2019.008.20081 and earlier, 2017.011.30106 and earlier version, 2017.011.30105 and earlier version, 2015.006.30457 and earlier, an…

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.8243 Published 2019-01-18 No fix listed CWE-347
TI-2024-13534 CVE-2024-20730 · GHSA-fxf6-rphp-prhw

TALOS-2023-1906 - Adobe Acrobat Reader Font CPAL integer overflow vulnerability

Priority HIGH 69

Acrobat Reader versions 20.005.30539, 23.008.20470 and earlier are affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.04448 Published 2024-02-15 No fix listed CWE-190
TI-2021-17678 CVE-2021-40728 · GHSA-pq3q-h37w-5953

Adobe Acrobat Reader DC Use After Free Arbitrary Code Execution

Priority HIGH 69

Adobe Acrobat Reader DC version 21.007.20095 (and earlier), 21.007.20096 (and earlier), 20.004.30015 (and earlier), and 17.011.30202 (and earlier) is affected by a use-after-free vulnerability in the processing of the Ge…

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.54627 Published 2021-10-15 No fix listed CWE-416
TI-2021-20224 CVE-2021-44703 · GHSA-48jx-388g-hcw7

Adobe Acrobat Pro DC Stack Overflow Vulnerability Arbitrary code execution

Priority HIGH 68

Acrobat Reader DC version 21.007.20099 (and earlier), 20.004.30017 (and earlier) and 17.011.30204 (and earlier) are affected by a stack buffer overflow vulnerability due to insecure handling of a crafted file, potentiall…

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.5837 Published 2022-01-14 No fix listed CWE-121
TI-2019-12353 CVE-2019-16451 · GHSA-5x82-564r-8m4g

Out-of-bounds write in Adobe Acrobat and Reader

Priority HIGH 67

Adobe Acrobat and Reader versions , 2019.021.20056 and earlier, 2017.011.30152 and earlier, 2017.011.30155 and earlier version, 2017.011.30152 and earlier, and 2015.006.30505 and earlier have a heap overflow vulnerabilit…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.34676 Published 2019-12-19 No fix listed CWE-787
TI-2019-05724 CVE-2019-8048 · GHSA-v4j4-6q7q-jhmq

Memory corruption in Adobe Acrobat and Reader

Priority HIGH 67

Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and earlier, 2015.006.30497 and earlier, and 2015.006.30498 and earlier have a buffer e…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.3456 Published 2019-08-20 No fix listed CWE-119
Load more
Open these records in search →