Veille CVE

Recherche « Adobe Acrobat and Reader »

41 CVE

  1. CVE-2026-81997 6.3 Moyenne

    Adobe Acrobat · Adobe Acrobat Reader · Adobe Acrobat 2024 · Adobe acrobat dc

    Acrobat Reader is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Scope is changed.

  2. CVE-2026-81994 6.3 Moyenne

    Adobe Acrobat · Adobe Acrobat Reader · Adobe Acrobat 2024 · Adobe acrobat dc

    Acrobat Reader is affected by an Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') vulnerability that could lead to arbitrary file system read. An attacker could exploit this vulnerability to access sensitive files and directories outside the intended access scope. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Scope is changed.

  3. CVE-2020-9713 5.5 Moyenne

    Adobe Acrobat Reader · Adobe acrobat dc · Adobe acrobat reader dc

    Adobe Acrobat and Reader versions 2020.009.20074 and earlier, 2020.001.30002, 2017.011.30171 and earlier, and 2015.006.30523 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

  4. CVE-2020-9711 5.5 Moyenne

    Adobe Acrobat Reader · Adobe acrobat dc · Adobe acrobat reader dc

    Acrobat Reader versions 2020.009.20074, 2020.001.30002, 2017.011.30171, 2015.006.30523 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

  5. CVE-2020-9695 7.8 Élevée

    Adobe Acrobat Reader · Adobe acrobat dc · Adobe acrobat reader dc

    Acrobat Reader versions 2020.009.20074, 2020.001.30002, 2017.011.30171, 2015.006.30523 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

  6. CVE-2026-47965 7.8 Élevée

    Adobe Acrobat DC · Adobe Acrobat Reader DC · Adobe Acrobat 2024 · Adobe acrobat

    Acrobat Reader versions 24.001.30365, 26.001.21651 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

  7. CVE-2026-47961 5.5 Moyenne

    Adobe Acrobat DC · Adobe Acrobat Reader DC · Adobe Acrobat 2024 · Adobe acrobat

    Acrobat Reader versions 24.001.30365, 26.001.21651 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

  8. CVE-2026-47959 7.8 Élevée

    Adobe Acrobat DC · Adobe Acrobat Reader DC · Adobe Acrobat 2024 · Adobe acrobat

    Acrobat Reader versions 24.001.30365, 26.001.21651 and earlier are affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

  9. CVE-2026-47955 7.8 Élevée

    Adobe Acrobat DC · Adobe Acrobat Reader DC · Adobe Acrobat 2024 · Adobe acrobat

    Acrobat Reader versions 24.001.30365, 26.001.21651 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

  10. CVE-2026-47952 7.8 Élevée

    Adobe Acrobat DC · Adobe Acrobat Reader DC · Adobe Acrobat 2024 · Adobe acrobat

    Acrobat Reader versions 24.001.30365, 26.001.21651 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

  11. CVE-2026-47937 7.7 Élevée

    Adobe Acrobat DC · Adobe Acrobat Reader DC · Adobe Acrobat 2024 · Adobe acrobat

    Acrobat Reader versions 24.001.30365, 26.001.21651 and earlier are affected by an Uncontrolled Search Path Element vulnerability that could result in arbitrary code execution in the context of the current user. An attacker with high privileges could exploit this vulnerability to execute arbitrary code. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Scope is changed.

  12. CVE-2026-47926 5.5 Moyenne

    Adobe Acrobat DC · Adobe Acrobat Reader DC · Adobe Acrobat 2024 · Adobe acrobat

    Acrobat Reader versions 24.001.30365, 26.001.21651 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

  13. CVE-2026-47925 5.5 Moyenne

    Adobe Acrobat DC · Adobe Acrobat Reader DC · Adobe Acrobat 2024 · Adobe acrobat

    Acrobat Reader versions 24.001.30365, 26.001.21651 and earlier are affected by an Integer Overflow or Wraparound vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

  14. CVE-2026-47924 5.5 Moyenne

    Adobe Acrobat DC · Adobe Acrobat Reader DC · Adobe Acrobat 2024 · Adobe acrobat

    Acrobat Reader versions 24.001.30365, 26.001.21651 and earlier are affected by a Use After Free vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

  15. CVE-2026-47923 5.5 Moyenne

    Adobe Acrobat DC · Adobe Acrobat Reader DC · Adobe Acrobat 2024 · Adobe acrobat

    Acrobat Reader versions 24.001.30365, 26.001.21651 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

  16. CVE-2026-47921 7.8 Élevée

    Adobe Acrobat DC · Adobe Acrobat Reader DC · Adobe Acrobat 2024 · Adobe acrobat

    Acrobat Reader versions 24.001.30365, 26.001.21651 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

  17. CVE-2026-47920 7.8 Élevée

    Adobe Acrobat DC · Adobe Acrobat Reader DC · Adobe Acrobat 2024 · Adobe acrobat

    Acrobat Reader versions 24.001.30365, 26.001.21651 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

  18. CVE-2026-47919 7.8 Élevée

    Adobe Acrobat DC · Adobe Acrobat Reader DC · Adobe Acrobat 2024 · Adobe acrobat

    Acrobat Reader versions 24.001.30365, 26.001.21651 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

  19. CVE-2026-47918 7.8 Élevée

    Adobe Acrobat DC · Adobe Acrobat Reader DC · Adobe Acrobat 2024 · Adobe acrobat

    Acrobat Reader versions 24.001.30365, 26.001.21651 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

  20. CVE-2026-47917 7.8 Élevée

    Adobe Acrobat DC · Adobe Acrobat Reader DC · Adobe Acrobat 2024 · Adobe acrobat

    Acrobat Reader versions 24.001.30365, 26.001.21651 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

  21. CVE-2026-47916 7.8 Élevée

    Adobe Acrobat DC · Adobe Acrobat Reader DC · Adobe Acrobat 2024 · Adobe acrobat

    Acrobat Reader versions 24.001.30365, 26.001.21651 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

  22. CVE-2026-47915 7.8 Élevée

    Adobe Acrobat DC · Adobe Acrobat Reader DC · Adobe Acrobat 2024 · Adobe acrobat

    Acrobat Reader versions 24.001.30365, 26.001.21651 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

  23. CVE-2026-47914 7.8 Élevée

    Adobe Acrobat DC · Adobe Acrobat Reader DC · Adobe Acrobat 2024 · Adobe acrobat

    Acrobat Reader versions 24.001.30365, 26.001.21651 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

  24. CVE-2026-47913 7.8 Élevée

    Adobe Acrobat DC · Adobe Acrobat Reader DC · Adobe Acrobat 2024 · Adobe acrobat

    Acrobat Reader versions 24.001.30365, 26.001.21651 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

  25. CVE-2026-47912 7.8 Élevée

    Adobe Acrobat DC · Adobe Acrobat Reader DC · Adobe Acrobat 2024 · Adobe acrobat

    Acrobat Reader versions 24.001.30365, 26.001.21651 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

  26. CVE-2026-47911 7.8 Élevée

    Adobe Acrobat DC · Adobe Acrobat Reader DC · Adobe Acrobat 2024 · Adobe acrobat

    Acrobat Reader versions 24.001.30365, 26.001.21651 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

  27. CVE-2026-34621 8.6 Élevée Exploitée

    Adobe Acrobat DC · Adobe Acrobat Reader DC · Adobe Acrobat 2024 · Adobe acrobat

    Acrobat Reader versions 24.001.30356, 26.001.21367 and earlier are affected by an Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

  28. CVE-2023-26369 7.8 Élevée Exploitée

    Adobe Acrobat Reader · Adobe acrobat · Adobe acrobat dc · Adobe acrobat reader dc

    Acrobat Reader versions 23.003.20284 (and earlier), 20.005.30516 (and earlier) and 20.005.30514 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

  29. CVE-2020-9715 7.8 Élevée Exploitée

    Adobe Acrobat and Reader · Adobe acrobat dc · Adobe acrobat reader dc

    Adobe Acrobat and Reader versions 2020.009.20074 and earlier, 2020.001.30002, 2017.011.30171 and earlier, and 2015.006.30523 and earlier have an use-after-free vulnerability. Successful exploitation could lead to arbitrary code execution .

  30. CVE-2018-4990 8.8 Élevée Exploitée

    Adobe Acrobat and Reader 2018.011.20038 and earlier, 2017.011.30079 and earlier, and 2015.006.30417 and earlier versions · Adobe acrobat dc · Adobe acrobat reader dc

    Adobe Acrobat and Reader versions 2018.011.20038 and earlier, 2017.011.30079 and earlier, and 2015.006.30417 and earlier have a Double Free vulnerability. Successful exploitation could lead to arbitrary code execution in the context of the current user.

  31. CVE-2014-0546 9.8 Critique Exploitée

    Adobe acrobat · Adobe acrobat reader

    Adobe Reader and Acrobat 10.x before 10.1.11 and 11.x before 11.0.08 on Windows allow attackers to bypass a sandbox protection mechanism, and consequently execute native code in a privileged context, via unspecified vectors.

  32. CVE-2014-0496 8.8 Élevée Exploitée

    Adobe acrobat

    Use-after-free vulnerability in Adobe Reader and Acrobat 10.x before 10.1.9 and 11.x before 11.0.06 on Windows and Mac OS X allows attackers to execute arbitrary code via unspecified vectors.

  33. CVE-2013-3346 9.8 Critique Exploitée

    Adobe acrobat · Adobe acrobat reader

    Adobe Reader and Acrobat 9.x before 9.5.5, 10.x before 10.1.7, and 11.x before 11.0.03 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2013-2718, CVE-2013-2719, CVE-2013-2720, CVE-2013-2721, CVE-2013-2722, CVE-2013-2723, CVE-2013-2725, CVE-2013-2726, CVE-2013-2731, CVE-2013-2732, CVE-2013-2734, CVE-2013-2735, CVE-2013-2736, CVE-2013-3337, CVE-2013-3338, CVE-2013-3339, CVE-2013-3340, and CVE-2013-3341.

  34. CVE-2013-0641 7.8 Élevée Exploitée

    Adobe acrobat · Adobe acrobat reader · Redhat enterprise linux desktop · Redhat enterprise linux eus

    Buffer overflow in Adobe Reader and Acrobat 9.x before 9.5.4, 10.x before 10.1.6, and 11.x before 11.0.02 allows remote attackers to execute arbitrary code via a crafted PDF document, as exploited in the wild in February 2013.

  35. CVE-2013-0640 7.8 Élevée Exploitée

    Adobe acrobat · Adobe acrobat reader · Opensuse opensuse · Suse linux enterprise desktop

    Adobe Reader and Acrobat 9.x before 9.5.4, 10.x before 10.1.6, and 11.x before 11.0.02 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted PDF document, as exploited in the wild in February 2013.

  36. CVE-2011-0609 7.8 Élevée Exploitée

    Adobe flash player · Adobe acrobat · Adobe acrobat reader · Adobe air

    Unspecified vulnerability in Adobe Flash Player 10.2.154.13 and earlier on Windows, Mac OS X, Linux, and Solaris; 10.1.106.16 and earlier on Android; Adobe AIR 2.5.1 and earlier; and Authplay.dll (aka AuthPlayLib.bundle) in Adobe Reader and Acrobat 9.x through 9.4.2 and 10.x through 10.0.1 on Windows and Mac OS X, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via crafted Flash content, as demonstrated by a .swf file embedded in an Excel spreadsheet, and as exploited in the wild in March 2011.

  37. CVE-2010-1297 7.8 Élevée Exploitée

    Adobe air · Adobe flash player · Adobe acrobat · Opensuse opensuse

    Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64; Adobe AIR before 2.0.2.12610; and Adobe Reader and Acrobat 9.x before 9.3.3, and 8.x before 8.2.3 on Windows and Mac OS X, allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted SWF content, related to authplay.dll and the ActionScript Virtual Machine 2 (AVM2) newfunction instruction, as exploited in the wild in June 2010.

  38. CVE-2009-3953 8.8 Élevée Exploitée

    Adobe acrobat · Suse linux enterprise debuginfo · Opensuse opensuse · Suse linux enterprise

    The U3D implementation in Adobe Reader and Acrobat 9.x before 9.3, 8.x before 8.2 on Windows and Mac OS X, and 7.x before 7.1.4 allows remote attackers to execute arbitrary code via malformed U3D data in a PDF document, related to a CLODProgressiveMeshDeclaration "array boundary issue," a different vulnerability than CVE-2009-2994.

  39. CVE-2009-3459 8.8 Élevée Exploitée

    Adobe acrobat · Adobe acrobat reader

    Heap-based buffer overflow in Adobe Reader and Acrobat 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2 allows remote attackers to execute arbitrary code via a crafted PDF file that triggers memory corruption, as exploited in the wild in October 2009. NOTE: some of these details are obtained from third party information.

  40. CVE-2008-2992 7.8 Élevée Exploitée Rançongiciel

    Adobe acrobat · Adobe acrobat reader · Oracle solaris

    Stack-based buffer overflow in Adobe Acrobat and Reader 8.1.2 and earlier allows remote attackers to execute arbitrary code via a PDF file that calls the util.printf JavaScript function with a crafted format string argument, a related issue to CVE-2008-1104.

  41. CVE-2007-5659 7.8 Élevée Exploitée

    Adobe acrobat · Adobe acrobat reader

    Multiple buffer overflows in Adobe Reader and Acrobat 8.1.1 and earlier allow remote attackers to execute arbitrary code via a PDF file with long arguments to unspecified JavaScript methods. NOTE: this issue might be subsumed by CVE-2008-0655.