Skip to main content

Acrobat

1117 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest
CVE-2016-1061 May 11, 10:59 CRITICAL PATCH Act Now

Use-after-free vulnerability in Adobe Reader and Acrobat before 11.0.16, Acrobat and Acrobat Reader DC Classic before 15.006.30172, and Acrobat and Acrobat Reader DC Continuous before 15.016.20039 on. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

RCE Microsoft Adobe Acrobat Acrobat Dc +2
NVD
CVSS 3.0
9.8
EPSS
2.5%
CVE-2016-1060 May 11, 10:59 CRITICAL PATCH Act Now

Use-after-free vulnerability in Adobe Reader and Acrobat before 11.0.16, Acrobat and Acrobat Reader DC Classic before 15.006.30172, and Acrobat and Acrobat Reader DC Continuous before 15.016.20039 on. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

RCE Microsoft Adobe Acrobat Acrobat Dc +2
NVD
CVSS 3.0
9.8
EPSS
2.5%
CVE-2016-1059 May 11, 10:59 CRITICAL PATCH Act Now

Use-after-free vulnerability in Adobe Reader and Acrobat before 11.0.16, Acrobat and Acrobat Reader DC Classic before 15.006.30172, and Acrobat and Acrobat Reader DC Continuous before 15.016.20039 on. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

RCE Microsoft Adobe Acrobat Acrobat Dc +2
NVD
CVSS 3.0
9.8
EPSS
2.5%
CVE-2016-1058 May 11, 10:59 CRITICAL PATCH Act Now

Use-after-free vulnerability in Adobe Reader and Acrobat before 11.0.16, Acrobat and Acrobat Reader DC Classic before 15.006.30172, and Acrobat and Acrobat Reader DC Continuous before 15.016.20039 on. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

RCE Microsoft Adobe Acrobat Acrobat Dc +2
NVD
CVSS 3.0
9.8
EPSS
2.5%
CVE-2016-1057 May 11, 10:59 CRITICAL PATCH Act Now

Use-after-free vulnerability in Adobe Reader and Acrobat before 11.0.16, Acrobat and Acrobat Reader DC Classic before 15.006.30172, and Acrobat and Acrobat Reader DC Continuous before 15.016.20039 on. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

RCE Microsoft Adobe Acrobat Acrobat Dc +2
NVD
CVSS 3.0
9.8
EPSS
2.5%
CVE-2016-1056 May 11, 10:59 CRITICAL PATCH Act Now

Use-after-free vulnerability in Adobe Reader and Acrobat before 11.0.16, Acrobat and Acrobat Reader DC Classic before 15.006.30172, and Acrobat and Acrobat Reader DC Continuous before 15.016.20039 on. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

RCE Microsoft Adobe Acrobat Acrobat Dc +2
NVD
CVSS 3.0
9.8
EPSS
2.5%
CVE-2016-1055 May 11, 10:59 CRITICAL PATCH Act Now

Use-after-free vulnerability in Adobe Reader and Acrobat before 11.0.16, Acrobat and Acrobat Reader DC Classic before 15.006.30172, and Acrobat and Acrobat Reader DC Continuous before 15.016.20039 on. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

RCE Microsoft Adobe Acrobat Acrobat Dc +2
NVD
CVSS 3.0
9.8
EPSS
2.5%
CVE-2016-1054 May 11, 10:59 CRITICAL PATCH Act Now

Use-after-free vulnerability in Adobe Reader and Acrobat before 11.0.16, Acrobat and Acrobat Reader DC Classic before 15.006.30172, and Acrobat and Acrobat Reader DC Continuous before 15.016.20039 on. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

RCE Microsoft Adobe Acrobat Acrobat Dc +2
NVD
CVSS 3.0
9.8
EPSS
2.5%
CVE-2016-1053 May 11, 10:59 CRITICAL PATCH Act Now

Use-after-free vulnerability in Adobe Reader and Acrobat before 11.0.16, Acrobat and Acrobat Reader DC Classic before 15.006.30172, and Acrobat and Acrobat Reader DC Continuous before 15.016.20039 on. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

RCE Microsoft Adobe Acrobat Acrobat Dc +2
NVD
CVSS 3.0
9.8
EPSS
2.5%
CVE-2016-1052 May 11, 10:59 CRITICAL PATCH Act Now

Use-after-free vulnerability in Adobe Reader and Acrobat before 11.0.16, Acrobat and Acrobat Reader DC Classic before 15.006.30172, and Acrobat and Acrobat Reader DC Continuous before 15.016.20039 on. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

RCE Microsoft Adobe Acrobat Acrobat Dc +2
NVD
CVSS 3.0
9.8
EPSS
2.5%
CVE-2016-1051 May 11, 10:59 CRITICAL PATCH Act Now

Use-after-free vulnerability in Adobe Reader and Acrobat before 11.0.16, Acrobat and Acrobat Reader DC Classic before 15.006.30172, and Acrobat and Acrobat Reader DC Continuous before 15.016.20039 on. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

RCE Microsoft Adobe Acrobat Acrobat Dc +2
NVD
CVSS 3.0
9.8
EPSS
2.5%
CVE-2016-1050 May 11, 10:59 CRITICAL PATCH Act Now

Use-after-free vulnerability in Adobe Reader and Acrobat before 11.0.16, Acrobat and Acrobat Reader DC Classic before 15.006.30172, and Acrobat and Acrobat Reader DC Continuous before 15.016.20039 on. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

RCE Microsoft Adobe Acrobat Acrobat Dc +2
NVD
CVSS 3.0
9.8
EPSS
2.8%
CVE-2016-1049 May 11, 10:59 CRITICAL PATCH Act Now

Use-after-free vulnerability in Adobe Reader and Acrobat before 11.0.16, Acrobat and Acrobat Reader DC Classic before 15.006.30172, and Acrobat and Acrobat Reader DC Continuous before 15.016.20039 on. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

RCE Microsoft Adobe Acrobat Acrobat Dc +2
NVD
CVSS 3.0
9.8
EPSS
2.5%
CVE-2016-1048 May 11, 10:59 CRITICAL PATCH Act Now

Use-after-free vulnerability in Adobe Reader and Acrobat before 11.0.16, Acrobat and Acrobat Reader DC Classic before 15.006.30172, and Acrobat and Acrobat Reader DC Continuous before 15.016.20039 on. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

RCE Microsoft Adobe Acrobat Acrobat Dc +2
NVD
CVSS 3.0
9.8
EPSS
2.5%
CVE-2016-1047 May 11, 10:59 CRITICAL PATCH Act Now

Use-after-free vulnerability in Adobe Reader and Acrobat before 11.0.16, Acrobat and Acrobat Reader DC Classic before 15.006.30172, and Acrobat and Acrobat Reader DC Continuous before 15.016.20039 on. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

RCE Microsoft Adobe Acrobat Acrobat Dc +2
NVD
CVSS 3.0
9.8
EPSS
2.5%
CVE-2016-1046 May 11, 10:59 CRITICAL PATCH Act Now

Use-after-free vulnerability in Adobe Reader and Acrobat before 11.0.16, Acrobat and Acrobat Reader DC Classic before 15.006.30172, and Acrobat and Acrobat Reader DC Continuous before 15.016.20039 on. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

RCE Microsoft Adobe Acrobat Acrobat Dc +2
NVD
CVSS 3.0
9.8
EPSS
2.5%
CVE-2016-1045 May 11, 10:59 CRITICAL PATCH Act Now

Use-after-free vulnerability in Adobe Reader and Acrobat before 11.0.16, Acrobat and Acrobat Reader DC Classic before 15.006.30172, and Acrobat and Acrobat Reader DC Continuous before 15.016.20039 on. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

RCE Microsoft Adobe Acrobat Acrobat Dc +2
NVD
CVSS 3.0
9.8
EPSS
2.5%
CVE-2016-1044 May 11, 10:59 CRITICAL PATCH Act Now

Adobe Reader and Acrobat before 11.0.16, Acrobat and Acrobat Reader DC Classic before 15.006.30172, and Acrobat and Acrobat Reader DC Continuous before 15.016.20039 on Windows and OS X allow. Rated critical severity (CVSS 10.0), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Authentication Bypass Microsoft Adobe Acrobat Acrobat Dc +2
NVD
CVSS 3.0
10.0
EPSS
5.1%
CVE-2016-1043 May 11, 10:59 CRITICAL PATCH Act Now

Integer overflow in Adobe Reader and Acrobat before 11.0.16, Acrobat and Acrobat Reader DC Classic before 15.006.30172, and Acrobat and Acrobat Reader DC Continuous before 15.016.20039 on Windows and. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Buffer Overflow vulnerability could allow attackers to corrupt memory to execute arbitrary code or crash the application.

RCE Buffer Overflow Microsoft Adobe Acrobat +3
NVD
CVSS 3.0
9.8
EPSS
2.6%
CVE-2016-1042 May 11, 10:59 CRITICAL PATCH Act Now

Adobe Reader and Acrobat before 11.0.16, Acrobat and Acrobat Reader DC Classic before 15.006.30172, and Acrobat and Acrobat Reader DC Continuous before 15.016.20039 on Windows and OS X allow. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Authentication Bypass Microsoft Adobe Acrobat Acrobat Dc +2
NVD
CVSS 3.0
9.8
EPSS
0.9%
CVE-2016-1041 May 11, 10:59 CRITICAL PATCH Act Now

Adobe Reader and Acrobat before 11.0.16, Acrobat and Acrobat Reader DC Classic before 15.006.30172, and Acrobat and Acrobat Reader DC Continuous before 15.016.20039 on Windows and OS X allow. Rated critical severity (CVSS 10.0), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Authentication Bypass Microsoft Adobe Acrobat Acrobat Dc +2
NVD
CVSS 3.0
10.0
EPSS
0.9%
CVE-2016-1040 May 11, 10:59 CRITICAL PATCH Act Now

Adobe Reader and Acrobat before 11.0.16, Acrobat and Acrobat Reader DC Classic before 15.006.30172, and Acrobat and Acrobat Reader DC Continuous before 15.016.20039 on Windows and OS X allow. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Authentication Bypass Microsoft Adobe Acrobat Acrobat Dc +2
NVD
CVSS 3.0
9.8
EPSS
1.3%
CVE-2016-1039 May 11, 10:59 CRITICAL PATCH Act Now

Adobe Reader and Acrobat before 11.0.16, Acrobat and Acrobat Reader DC Classic before 15.006.30172, and Acrobat and Acrobat Reader DC Continuous before 15.016.20039 on Windows and OS X allow. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Authentication Bypass Microsoft Adobe Acrobat Acrobat Dc +2
NVD
CVSS 3.0
9.8
EPSS
0.9%
CVE-2016-1038 May 11, 10:59 CRITICAL PATCH Act Now

Adobe Reader and Acrobat before 11.0.16, Acrobat and Acrobat Reader DC Classic before 15.006.30172, and Acrobat and Acrobat Reader DC Continuous before 15.016.20039 on Windows and OS X allow. Rated critical severity (CVSS 10.0), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Authentication Bypass Microsoft Adobe Acrobat Acrobat Dc +2
NVD
CVSS 3.0
10.0
EPSS
5.4%
CVE-2016-1037 May 11, 10:59 CRITICAL PATCH Act Now

Adobe Reader and Acrobat before 11.0.16, Acrobat and Acrobat Reader DC Classic before 15.006.30172, and Acrobat and Acrobat Reader DC Continuous before 15.016.20039 on Windows and OS X allow. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Buffer Overflow vulnerability could allow attackers to corrupt memory to execute arbitrary code or crash the application.

RCE Buffer Overflow Denial Of Service Microsoft Adobe +4
NVD
CVSS 3.0
9.8
EPSS
2.1%
CVE-2016-1111 Apr 30, 10:59 HIGH This Week

Double free vulnerability in Adobe Reader and Acrobat before 11.0.14, Acrobat and Acrobat Reader DC Classic before 15.006.30119, and Acrobat and Acrobat Reader DC Continuous before 15.010.20056 on. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

RCE Microsoft Adobe Acrobat Acrobat Dc +2
NVD
CVSS 3.0
8.8
EPSS
2.6%
CVE-2016-1009 Mar 09, 11:59 CRITICAL PATCH Act Now

Adobe Reader and Acrobat before 11.0.15, Acrobat and Acrobat Reader DC Classic before 15.006.30121, and Acrobat and Acrobat Reader DC Continuous before 15.010.20060 on Windows and OS X allow. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Buffer Overflow vulnerability could allow attackers to corrupt memory to execute arbitrary code or crash the application.

RCE Buffer Overflow Denial Of Service Microsoft Adobe +4
NVD
CVSS 3.0
9.8
EPSS
3.6%
CVE-2016-1008 Mar 09, 11:59 HIGH PATCH This Week

Untrusted search path vulnerability in Adobe Reader and Acrobat before 11.0.15, Acrobat and Acrobat Reader DC Classic before 15.006.30121, and Acrobat and Acrobat Reader DC Continuous before. Rated high severity (CVSS 8.4), this vulnerability is no authentication required, low attack complexity.

Information Disclosure Microsoft Adobe Acrobat Acrobat Dc +2
NVD
CVSS 3.0
8.4
EPSS
0.6%
CVE-2016-1007 Mar 09, 11:59 CRITICAL PATCH Act Now

Adobe Reader and Acrobat before 11.0.15, Acrobat and Acrobat Reader DC Classic before 15.006.30121, and Acrobat and Acrobat Reader DC Continuous before 15.010.20060 on Windows and OS X allow. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Buffer Overflow vulnerability could allow attackers to corrupt memory to execute arbitrary code or crash the application.

RCE Buffer Overflow Denial Of Service Microsoft Adobe +4
NVD
CVSS 3.0
9.8
EPSS
3.6%
CVE-2016-0947 Jan 14, 05:59 HIGH PATCH This Week

Untrusted search path vulnerability in Adobe Download Manager, as used in Adobe Reader and Acrobat before 11.0.14, Acrobat and Acrobat Reader DC Classic before 15.006.30119, and Acrobat and Acrobat. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity.

Information Disclosure Microsoft Adobe Acrobat Acrobat Dc +2
NVD
CVSS 3.0
7.8
EPSS
0.5%
CVE-2016-0946 Jan 14, 05:59 CRITICAL PATCH Act Now

Adobe Reader and Acrobat before 11.0.14, Acrobat and Acrobat Reader DC Classic before 15.006.30119, and Acrobat and Acrobat Reader DC Continuous before 15.010.20056 on Windows and OS X allow. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Buffer Overflow vulnerability could allow attackers to corrupt memory to execute arbitrary code or crash the application.

RCE Buffer Overflow Denial Of Service Microsoft Adobe +4
NVD
CVSS 3.0
9.8
EPSS
3.2%
CVE-2016-0945 Jan 14, 05:59 CRITICAL PATCH Act Now

Adobe Reader and Acrobat before 11.0.14, Acrobat and Acrobat Reader DC Classic before 15.006.30119, and Acrobat and Acrobat Reader DC Continuous before 15.010.20056 on Windows and OS X allow. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Buffer Overflow vulnerability could allow attackers to corrupt memory to execute arbitrary code or crash the application.

RCE Buffer Overflow Denial Of Service Microsoft Adobe +4
NVD
CVSS 3.0
9.8
EPSS
3.2%
CVE-2016-0944 Jan 14, 05:59 CRITICAL PATCH Act Now

Adobe Reader and Acrobat before 11.0.14, Acrobat and Acrobat Reader DC Classic before 15.006.30119, and Acrobat and Acrobat Reader DC Continuous before 15.010.20056 on Windows and OS X allow. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Buffer Overflow vulnerability could allow attackers to corrupt memory to execute arbitrary code or crash the application.

RCE Buffer Overflow Denial Of Service Microsoft Adobe +4
NVD
CVSS 3.0
9.8
EPSS
3.2%
CVE-2016-0943 Jan 14, 05:59 HIGH PATCH This Week

Adobe Reader and Acrobat before 11.0.14, Acrobat and Acrobat Reader DC Classic before 15.006.30119, and Acrobat and Acrobat Reader DC Continuous before 15.010.20056 on Windows and OS X mishandle the. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Privilege Escalation Microsoft Adobe Acrobat Acrobat Dc +2
NVD
CVSS 3.0
8.8
EPSS
2.1%
CVE-2016-0942 Jan 14, 05:59 CRITICAL PATCH Act Now

Adobe Reader and Acrobat before 11.0.14, Acrobat and Acrobat Reader DC Classic before 15.006.30119, and Acrobat and Acrobat Reader DC Continuous before 15.010.20056 on Windows and OS X allow. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Buffer Overflow vulnerability could allow attackers to corrupt memory to execute arbitrary code or crash the application.

RCE Buffer Overflow Denial Of Service Microsoft Adobe +4
NVD
CVSS 3.0
9.8
EPSS
3.2%
CVE-2016-0941 Jan 14, 05:59 HIGH PATCH This Week

Use-after-free vulnerability in the Search object implementation in Adobe Reader and Acrobat before 11.0.14, Acrobat and Acrobat Reader DC Classic before 15.006.30119, and Acrobat and Acrobat Reader. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

RCE Microsoft Adobe Acrobat Acrobat Dc +2
NVD
CVSS 3.0
8.8
EPSS
3.2%
CVE-2016-0940 Jan 14, 05:59 CRITICAL PATCH Act Now

Use-after-free vulnerability in Adobe Reader and Acrobat before 11.0.14, Acrobat and Acrobat Reader DC Classic before 15.006.30119, and Acrobat and Acrobat Reader DC Continuous before 15.010.20056 on. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

RCE Microsoft Adobe Acrobat Acrobat Dc +2
NVD
CVSS 3.0
9.8
EPSS
3.9%
CVE-2016-0939 Jan 14, 05:59 HIGH PATCH This Week

Adobe Reader and Acrobat before 11.0.14, Acrobat and Acrobat Reader DC Classic before 15.006.30119, and Acrobat and Acrobat Reader DC Continuous before 15.010.20056 on Windows and OS X allow. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Buffer Overflow vulnerability could allow attackers to corrupt memory to execute arbitrary code or crash the application.

RCE Buffer Overflow Denial Of Service Microsoft Adobe +4
NVD
CVSS 3.0
8.8
EPSS
2.9%
CVE-2016-0938 Jan 14, 05:59 HIGH PATCH This Week

The AcroForm plugin in Adobe Reader and Acrobat before 11.0.14, Acrobat and Acrobat Reader DC Classic before 15.006.30119, and Acrobat and Acrobat Reader DC Continuous before 15.010.20056 on Windows. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Buffer Overflow vulnerability could allow attackers to corrupt memory to execute arbitrary code or crash the application.

RCE Buffer Overflow Denial Of Service Microsoft Adobe +4
NVD
CVSS 3.0
8.8
EPSS
2.7%
CVE-2016-0937 Jan 14, 05:59 HIGH PATCH This Week

Use-after-free vulnerability in the OCG object implementation in Adobe Reader and Acrobat before 11.0.14, Acrobat and Acrobat Reader DC Classic before 15.006.30119, and Acrobat and Acrobat Reader DC. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

RCE Microsoft Adobe Acrobat Acrobat Dc +2
NVD
CVSS 3.0
8.8
EPSS
4.9%
CVE-2016-0936 Jan 14, 05:59 HIGH PATCH This Week

Adobe Reader and Acrobat before 11.0.14, Acrobat and Acrobat Reader DC Classic before 15.006.30119, and Acrobat and Acrobat Reader DC Continuous before 15.010.20056 on Windows and OS X allow. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Buffer Overflow vulnerability could allow attackers to corrupt memory to execute arbitrary code or crash the application.

RCE Buffer Overflow Denial Of Service Microsoft Adobe +4
NVD
CVSS 3.0
8.8
EPSS
2.7%
CVE-2016-0935 Jan 14, 05:59 HIGH PATCH This Week

Double free vulnerability in Adobe Reader and Acrobat before 11.0.14, Acrobat and Acrobat Reader DC Classic before 15.006.30119, and Acrobat and Acrobat Reader DC Continuous before 15.010.20056 on. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

RCE Microsoft Adobe Acrobat Acrobat Dc +2
NVD
CVSS 3.0
8.8
EPSS
3.8%
CVE-2016-0934 Jan 14, 05:59 HIGH PATCH This Week

Use-after-free vulnerability in AGM.dll in Adobe Reader and Acrobat before 11.0.14, Acrobat and Acrobat Reader DC Classic before 15.006.30119, and Acrobat and Acrobat Reader DC Continuous before. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

RCE Microsoft Adobe Acrobat Acrobat Dc +2
NVD
CVSS 3.0
8.8
EPSS
3.2%
CVE-2016-0933 Jan 14, 05:59 CRITICAL PATCH Act Now

Adobe Reader and Acrobat before 11.0.14, Acrobat and Acrobat Reader DC Classic before 15.006.30119, and Acrobat and Acrobat Reader DC Continuous before 15.010.20056 on Windows and OS X allow. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Buffer Overflow vulnerability could allow attackers to corrupt memory to execute arbitrary code or crash the application.

RCE Buffer Overflow Denial Of Service Microsoft Adobe +4
NVD
CVSS 3.0
9.8
EPSS
3.0%
CVE-2016-0932 Jan 14, 05:59 HIGH PATCH This Week

Use-after-free vulnerability in the Doc object implementation in Adobe Reader and Acrobat before 11.0.14, Acrobat and Acrobat Reader DC Classic before 15.006.30119, and Acrobat and Acrobat Reader DC. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

RCE Microsoft Adobe Acrobat Acrobat Dc +2
NVD
CVSS 3.0
8.8
EPSS
3.2%
CVE-2016-0931 Jan 14, 05:59 HIGH PATCH This Week

Adobe Reader and Acrobat before 11.0.14, Acrobat and Acrobat Reader DC Classic before 15.006.30119, and Acrobat and Acrobat Reader DC Continuous before 15.010.20056 on Windows and OS X allow. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Buffer Overflow vulnerability could allow attackers to corrupt memory to execute arbitrary code or crash the application.

RCE Buffer Overflow Denial Of Service Microsoft Adobe +4
NVD
CVSS 3.0
8.8
EPSS
2.9%
CVE-2015-8458 Dec 21, 11:59 MEDIUM PATCH This Month

Heap-based buffer overflow in AGM.dll in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2015.006.30094, and Acrobat and Acrobat. Rated medium severity (CVSS 6.8), this vulnerability is remotely exploitable. This Out-of-bounds Write vulnerability could allow attackers to write data beyond allocated buffer boundaries leading to code execution or crashes.

RCE Buffer Overflow Memory Corruption Microsoft Adobe +4
NVD
CVSS 2.0
6.8
EPSS
2.8%
CVE-2015-7650 Nov 04, 03:59 MEDIUM This Month

Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2015.006.30094, and Acrobat and Acrobat Reader DC Continuous before 2015.009.20069. Rated medium severity (CVSS 6.8), this vulnerability is remotely exploitable. No vendor patch available.

RCE Buffer Overflow Denial Of Service Microsoft Adobe +4
NVD
CVSS 2.0
6.8
EPSS
1.0%
CVE-2015-7829 Oct 15, 00:00 LOW PATCH Monitor

Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2015.006.30094, and Acrobat and Acrobat Reader DC Continuous before 2015.009.20069. Rated low severity (CVSS 1.9). This Buffer Overflow vulnerability could allow attackers to corrupt memory to execute arbitrary code or crash the application.

Buffer Overflow Microsoft Adobe Acrobat Acrobat Dc +2
NVD
CVSS 2.0
1.9
EPSS
0.4%
CVE-2015-7624 Oct 14, 23:59 MEDIUM PATCH This Month

Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2015.006.30094, and Acrobat and Acrobat Reader DC Continuous before 2015.009.20069. Rated medium severity (CVSS 5.0), this vulnerability is remotely exploitable, low attack complexity. This Exposure of Sensitive Information vulnerability could allow attackers to access sensitive data that should not be disclosed.

Information Disclosure Microsoft Adobe Acrobat Acrobat Dc +2
NVD
CVSS 2.0
5.0
EPSS
2.1%
CVE-2015-7623 Oct 14, 23:59 MEDIUM PATCH This Month

The ANAuthenticateResource method in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2015.006.30094, and Acrobat and Acrobat Reader. Rated medium severity (CVSS 6.8), this vulnerability is remotely exploitable.

Authentication Bypass Microsoft Adobe Acrobat Acrobat Dc +2
NVD
CVSS 2.0
6.8
EPSS
0.8%
CVE-2015-7622 Oct 14, 23:59 CRITICAL POC PATCH THREAT Act Now

Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2015.006.30094, and Acrobat and Acrobat Reader DC Continuous before 2015.009.20069. Rated critical severity (CVSS 10.0), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and EPSS exploitation probability 19.7%.

RCE Buffer Overflow Denial Of Service Microsoft Adobe +4
NVD Exploit-DB
CVSS 2.0
10.0
EPSS
19.7%
Threat
4.1
CVE-2015-7621 Oct 14, 23:59 MEDIUM PATCH This Month

Use-after-free vulnerability in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2015.006.30094, and Acrobat and Acrobat Reader DC. Rated medium severity (CVSS 6.8), this vulnerability is remotely exploitable. This Use After Free vulnerability could allow attackers to access freed memory to execute arbitrary code or crash the application.

RCE Use After Free Memory Corruption Microsoft Adobe +4
NVD
CVSS 2.0
6.8
EPSS
1.3%
CVE-2015-7620 Oct 14, 23:59 MEDIUM PATCH This Month

The ANSendForBrowserReview method in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2015.006.30094, and Acrobat and Acrobat Reader. Rated medium severity (CVSS 6.8), this vulnerability is remotely exploitable.

Authentication Bypass Microsoft Adobe Acrobat Acrobat Dc +2
NVD
CVSS 2.0
6.8
EPSS
0.8%
CVE-2015-7619 Oct 14, 23:59 MEDIUM PATCH This Month

The ANShareFile2 method in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2015.006.30094, and Acrobat and Acrobat Reader DC. Rated medium severity (CVSS 6.8), this vulnerability is remotely exploitable. This Use After Free vulnerability could allow attackers to access freed memory to execute arbitrary code or crash the application.

Authentication Bypass Use After Free Memory Corruption Microsoft Adobe +4
NVD
CVSS 2.0
6.8
EPSS
1.8%
CVE-2015-7618 Oct 14, 23:59 MEDIUM PATCH This Month

The CBAutoConfigCommentRepository method in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2015.006.30094, and Acrobat and Acrobat. Rated medium severity (CVSS 6.8), this vulnerability is remotely exploitable. This Use After Free vulnerability could allow attackers to access freed memory to execute arbitrary code or crash the application.

Authentication Bypass Use After Free Memory Corruption Microsoft Adobe +4
NVD
CVSS 2.0
6.8
EPSS
1.1%
CVE-2015-7617 Oct 14, 23:59 MEDIUM PATCH This Month

Use-after-free vulnerability in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2015.006.30094, and Acrobat and Acrobat Reader DC. Rated medium severity (CVSS 6.8), this vulnerability is remotely exploitable. This Use After Free vulnerability could allow attackers to access freed memory to execute arbitrary code or crash the application.

RCE Use After Free Memory Corruption Microsoft Adobe +4
NVD
CVSS 2.0
6.8
EPSS
1.3%
CVE-2015-7616 Oct 14, 23:59 MEDIUM PATCH This Month

The ANVerifyComments method in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2015.006.30094, and Acrobat and Acrobat Reader DC. Rated medium severity (CVSS 6.8), this vulnerability is remotely exploitable.

Authentication Bypass Microsoft Adobe Acrobat Acrobat Dc +2
NVD
CVSS 2.0
6.8
EPSS
0.8%
CVE-2015-7615 Oct 14, 23:59 MEDIUM PATCH This Month

Use-after-free vulnerability in a SaveAs feature in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2015.006.30094, and Acrobat and. Rated medium severity (CVSS 6.8), this vulnerability is remotely exploitable. This Use After Free vulnerability could allow attackers to access freed memory to execute arbitrary code or crash the application.

RCE Use After Free Memory Corruption Microsoft Adobe +4
NVD
CVSS 2.0
6.8
EPSS
1.3%
CVE-2015-7614 Oct 14, 23:59 MEDIUM PATCH This Month

Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2015.006.30094, and Acrobat and Acrobat Reader DC Continuous before 2015.009.20069. Rated medium severity (CVSS 6.8), this vulnerability is remotely exploitable.

Authentication Bypass Microsoft Adobe Acrobat Acrobat Dc +2
NVD
CVSS 2.0
6.8
EPSS
1.0%
CVE-2015-6725 Oct 14, 23:59 MEDIUM PATCH This Month

The ANSendForSharedReview method in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2015.006.30094, and Acrobat and Acrobat Reader. Rated medium severity (CVSS 6.8), this vulnerability is remotely exploitable.

Authentication Bypass Microsoft Adobe Acrobat Acrobat Dc +2
NVD
CVSS 2.0
6.8
EPSS
0.8%
CVE-2015-6724 Oct 14, 23:59 MEDIUM PATCH This Month

The ANSendForApproval method in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2015.006.30094, and Acrobat and Acrobat Reader DC. Rated medium severity (CVSS 6.8), this vulnerability is remotely exploitable.

Authentication Bypass Microsoft Adobe Acrobat Acrobat Dc +2
NVD
CVSS 2.0
6.8
EPSS
0.8%
CVE-2015-6723 Oct 14, 23:59 MEDIUM PATCH This Month

The ANTrustPropagateAll method in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2015.006.30094, and Acrobat and Acrobat Reader DC. Rated medium severity (CVSS 6.8), this vulnerability is remotely exploitable.

Authentication Bypass Microsoft Adobe Acrobat Acrobat Dc +2
NVD
CVSS 2.0
6.8
EPSS
0.8%
CVE-2015-6722 Oct 14, 23:59 MEDIUM PATCH This Month

The CBSharedReviewStatusDialog method in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2015.006.30094, and Acrobat and Acrobat. Rated medium severity (CVSS 6.8), this vulnerability is remotely exploitable.

Authentication Bypass Microsoft Adobe Acrobat Acrobat Dc +2
NVD
CVSS 2.0
6.8
EPSS
0.8%
CVE-2015-6721 Oct 14, 23:59 MEDIUM PATCH This Month

The CBSharedReviewSecurityDialog method in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2015.006.30094, and Acrobat and Acrobat. Rated medium severity (CVSS 6.8), this vulnerability is remotely exploitable.

Authentication Bypass Microsoft Adobe Acrobat Acrobat Dc +2
NVD
CVSS 2.0
6.8
EPSS
0.8%
CVE-2015-6720 Oct 14, 23:59 MEDIUM PATCH This Month

The ANRunSharedReviewEmailStep method in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2015.006.30094, and Acrobat and Acrobat. Rated medium severity (CVSS 6.8), this vulnerability is remotely exploitable.

Authentication Bypass Microsoft Adobe Acrobat Acrobat Dc +2
NVD
CVSS 2.0
6.8
EPSS
0.8%
CVE-2015-6719 Oct 14, 23:59 MEDIUM PATCH This Month

The CBSharedReviewCloseDialog method in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2015.006.30094, and Acrobat and Acrobat. Rated medium severity (CVSS 6.8), this vulnerability is remotely exploitable.

Authentication Bypass Microsoft Adobe Acrobat Acrobat Dc +2
NVD
CVSS 2.0
6.8
EPSS
0.8%
CVE-2015-6718 Oct 14, 23:59 MEDIUM PATCH This Month

The CBSharedReviewIfOfflineDialog method in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2015.006.30094, and Acrobat and Acrobat. Rated medium severity (CVSS 6.8), this vulnerability is remotely exploitable.

Authentication Bypass Microsoft Adobe Acrobat Acrobat Dc +2
NVD
CVSS 2.0
6.8
EPSS
0.8%
CVE-2015-6717 Oct 14, 23:59 MEDIUM PATCH This Month

The DynamicAnnotStore method in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2015.006.30094, and Acrobat and Acrobat Reader DC. Rated medium severity (CVSS 6.8), this vulnerability is remotely exploitable.

Authentication Bypass Microsoft Adobe Acrobat Acrobat Dc +2
NVD
CVSS 2.0
6.8
EPSS
0.8%
CVE-2015-6716 Oct 14, 23:59 MEDIUM PATCH This Month

The ANSendForFormDistribution method in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2015.006.30094, and Acrobat and Acrobat. Rated medium severity (CVSS 6.8), this vulnerability is remotely exploitable.

Authentication Bypass Microsoft Adobe Acrobat Acrobat Dc +2
NVD
CVSS 2.0
6.8
EPSS
0.8%
CVE-2015-6715 Oct 14, 23:59 MEDIUM PATCH This Month

The Function apply implementation in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2015.006.30094, and Acrobat and Acrobat Reader. Rated medium severity (CVSS 6.8), this vulnerability is remotely exploitable.

Authentication Bypass Microsoft Adobe Acrobat Acrobat Dc +2
NVD
CVSS 2.0
6.8
EPSS
0.8%
CVE-2015-6714 Oct 14, 23:59 MEDIUM PATCH This Month

The Function bind implementation in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2015.006.30094, and Acrobat and Acrobat Reader. Rated medium severity (CVSS 6.8), this vulnerability is remotely exploitable.

Authentication Bypass Microsoft Adobe Acrobat Acrobat Dc +2
NVD
CVSS 2.0
6.8
EPSS
0.8%
CVE-2015-6713 Oct 14, 23:59 HIGH PATCH This Week

The Function call implementation in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2015.006.30094, and Acrobat and Acrobat Reader. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, low attack complexity.

Authentication Bypass Microsoft Adobe Acrobat Acrobat Dc +2
NVD
CVSS 2.0
7.5
EPSS
1.5%
CVE-2015-6712 Oct 14, 23:59 MEDIUM PATCH This Month

The ANSendApprovalToAuthorEnabled method in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2015.006.30094, and Acrobat and Acrobat. Rated medium severity (CVSS 6.8), this vulnerability is remotely exploitable.

Authentication Bypass Microsoft Adobe Acrobat Acrobat Dc +2
NVD
CVSS 2.0
6.8
EPSS
0.8%
CVE-2015-6711 Oct 14, 23:59 MEDIUM PATCH This Month

The DoIdentityDialog method in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2015.006.30094, and Acrobat and Acrobat Reader DC. Rated medium severity (CVSS 6.8), this vulnerability is remotely exploitable.

Authentication Bypass Microsoft Adobe Acrobat Acrobat Dc +2
NVD
CVSS 2.0
6.8
EPSS
0.8%
CVE-2015-6710 Oct 14, 23:59 MEDIUM PATCH This Month

The CBBBRInit method in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2015.006.30094, and Acrobat and Acrobat Reader DC Continuous. Rated medium severity (CVSS 6.8), this vulnerability is remotely exploitable.

Authentication Bypass Microsoft Adobe Acrobat Acrobat Dc +2
NVD
CVSS 2.0
6.8
EPSS
0.8%
CVE-2015-6709 Oct 14, 23:59 MEDIUM PATCH This Month

The CBBBRInvite method in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2015.006.30094, and Acrobat and Acrobat Reader DC. Rated medium severity (CVSS 6.8), this vulnerability is remotely exploitable.

Authentication Bypass Microsoft Adobe Acrobat Acrobat Dc +2
NVD
CVSS 2.0
6.8
EPSS
0.8%
CVE-2015-6708 Oct 14, 23:59 MEDIUM PATCH This Month

The ANStartApproval method in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2015.006.30094, and Acrobat and Acrobat Reader DC. Rated medium severity (CVSS 6.8), this vulnerability is remotely exploitable.

Authentication Bypass Microsoft Adobe Acrobat Acrobat Dc +2
NVD
CVSS 2.0
6.8
EPSS
0.8%
CVE-2015-6707 Oct 14, 23:59 MEDIUM PATCH This Month

The ANSendForReview method in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2015.006.30094, and Acrobat and Acrobat Reader DC. Rated medium severity (CVSS 6.8), this vulnerability is remotely exploitable.

Authentication Bypass Microsoft Adobe Acrobat Acrobat Dc +2
NVD
CVSS 2.0
6.8
EPSS
0.8%
CVE-2015-6706 Oct 14, 23:59 MEDIUM PATCH This Month

Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2015.006.30094, and Acrobat and Acrobat Reader DC Continuous before 2015.009.20069. Rated medium severity (CVSS 5.0), this vulnerability is remotely exploitable, low attack complexity. This Exposure of Sensitive Information vulnerability could allow attackers to access sensitive data that should not be disclosed.

Information Disclosure Microsoft Adobe Acrobat Acrobat Dc +2
NVD
CVSS 2.0
5.0
EPSS
2.1%
CVE-2015-6705 Oct 14, 23:59 MEDIUM PATCH This Month

Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2015.006.30094, and Acrobat and Acrobat Reader DC Continuous before 2015.009.20069. Rated medium severity (CVSS 5.0), this vulnerability is remotely exploitable, low attack complexity. This Exposure of Sensitive Information vulnerability could allow attackers to access sensitive data that should not be disclosed.

Information Disclosure Microsoft Adobe Acrobat Acrobat Dc +2
NVD
CVSS 2.0
5.0
EPSS
2.1%
CVE-2015-6704 Oct 14, 23:59 MEDIUM PATCH This Month

The animations property implementation in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2015.006.30094, and Acrobat and Acrobat. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable.

Information Disclosure Microsoft Adobe Acrobat Acrobat Dc +2
NVD
CVSS 2.0
4.3
EPSS
2.1%
CVE-2015-6703 Oct 14, 23:59 MEDIUM PATCH This Month

The loadFlashMovie function in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2015.006.30094, and Acrobat and Acrobat Reader DC. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable.

Information Disclosure Microsoft Adobe Acrobat Acrobat Dc +2
NVD
CVSS 2.0
4.3
EPSS
2.1%
CVE-2015-6702 Oct 14, 23:59 MEDIUM PATCH This Month

The createSquareMesh function in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2015.006.30094, and Acrobat and Acrobat Reader DC. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable.

Information Disclosure Microsoft Adobe Acrobat Acrobat Dc +2
NVD
CVSS 2.0
4.3
EPSS
2.1%
CVE-2015-6701 Oct 14, 23:59 MEDIUM PATCH This Month

The ambientIlluminationColor property implementation in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2015.006.30094, and Acrobat. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable.

Information Disclosure Microsoft Adobe Acrobat Acrobat Dc +2
NVD
CVSS 2.0
4.3
EPSS
2.1%
CVE-2015-6700 Oct 14, 23:59 MEDIUM PATCH This Month

The setBackground function in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2015.006.30094, and Acrobat and Acrobat Reader DC. Rated medium severity (CVSS 5.0), this vulnerability is remotely exploitable, low attack complexity.

Information Disclosure Microsoft Adobe Acrobat Acrobat Dc +2
NVD
CVSS 2.0
5.0
EPSS
2.1%
CVE-2015-6699 Oct 14, 23:59 MEDIUM PATCH This Month

The addForegroundSprite function in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2015.006.30094, and Acrobat and Acrobat Reader. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable.

Information Disclosure Microsoft Adobe Acrobat Acrobat Dc +2
NVD
CVSS 2.0
4.3
EPSS
2.1%
CVE-2015-6698 Oct 14, 23:59 MEDIUM PATCH This Month

Heap-based buffer overflow in the AcroForm implementation in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2015.006.30094, and. Rated medium severity (CVSS 6.8), this vulnerability is remotely exploitable. This Out-of-bounds Write vulnerability could allow attackers to write data beyond allocated buffer boundaries leading to code execution or crashes.

RCE Buffer Overflow Memory Corruption Microsoft Adobe +4
NVD
CVSS 2.0
6.8
EPSS
1.5%
CVE-2015-6697 Oct 14, 23:59 MEDIUM PATCH This Month

Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2015.006.30094, and Acrobat and Acrobat Reader DC Continuous before 2015.009.20069. Rated medium severity (CVSS 6.8), this vulnerability is remotely exploitable.

Information Disclosure Microsoft Adobe Acrobat Acrobat Dc +2
NVD
CVSS 2.0
6.8
EPSS
1.7%
CVE-2015-6696 Oct 14, 23:59 MEDIUM PATCH This Month

Heap-based buffer overflow in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2015.006.30094, and Acrobat and Acrobat Reader DC. Rated medium severity (CVSS 6.8), this vulnerability is remotely exploitable. This Out-of-bounds Write vulnerability could allow attackers to write data beyond allocated buffer boundaries leading to code execution or crashes.

RCE Buffer Overflow Memory Corruption Microsoft Adobe +4
NVD
CVSS 2.0
6.8
EPSS
1.5%
CVE-2016-1061
EPSS 2% CVSS 9.8
CRITICAL PATCH Act Now

Use-after-free vulnerability in Adobe Reader and Acrobat before 11.0.16, Acrobat and Acrobat Reader DC Classic before 15.006.30172, and Acrobat and Acrobat Reader DC Continuous before 15.016.20039 on. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

RCE Microsoft Adobe +4
NVD
CVE-2016-1060
EPSS 2% CVSS 9.8
CRITICAL PATCH Act Now

Use-after-free vulnerability in Adobe Reader and Acrobat before 11.0.16, Acrobat and Acrobat Reader DC Classic before 15.006.30172, and Acrobat and Acrobat Reader DC Continuous before 15.016.20039 on. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

RCE Microsoft Adobe +4
NVD
CVE-2016-1059
EPSS 2% CVSS 9.8
CRITICAL PATCH Act Now

Use-after-free vulnerability in Adobe Reader and Acrobat before 11.0.16, Acrobat and Acrobat Reader DC Classic before 15.006.30172, and Acrobat and Acrobat Reader DC Continuous before 15.016.20039 on. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

RCE Microsoft Adobe +4
NVD
CVE-2016-1058
EPSS 2% CVSS 9.8
CRITICAL PATCH Act Now

Use-after-free vulnerability in Adobe Reader and Acrobat before 11.0.16, Acrobat and Acrobat Reader DC Classic before 15.006.30172, and Acrobat and Acrobat Reader DC Continuous before 15.016.20039 on. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

RCE Microsoft Adobe +4
NVD
CVE-2016-1057
EPSS 2% CVSS 9.8
CRITICAL PATCH Act Now

Use-after-free vulnerability in Adobe Reader and Acrobat before 11.0.16, Acrobat and Acrobat Reader DC Classic before 15.006.30172, and Acrobat and Acrobat Reader DC Continuous before 15.016.20039 on. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

RCE Microsoft Adobe +4
NVD
CVE-2016-1056
EPSS 2% CVSS 9.8
CRITICAL PATCH Act Now

Use-after-free vulnerability in Adobe Reader and Acrobat before 11.0.16, Acrobat and Acrobat Reader DC Classic before 15.006.30172, and Acrobat and Acrobat Reader DC Continuous before 15.016.20039 on. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

RCE Microsoft Adobe +4
NVD
CVE-2016-1055
EPSS 2% CVSS 9.8
CRITICAL PATCH Act Now

Use-after-free vulnerability in Adobe Reader and Acrobat before 11.0.16, Acrobat and Acrobat Reader DC Classic before 15.006.30172, and Acrobat and Acrobat Reader DC Continuous before 15.016.20039 on. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

RCE Microsoft Adobe +4
NVD
CVE-2016-1054
EPSS 2% CVSS 9.8
CRITICAL PATCH Act Now

Use-after-free vulnerability in Adobe Reader and Acrobat before 11.0.16, Acrobat and Acrobat Reader DC Classic before 15.006.30172, and Acrobat and Acrobat Reader DC Continuous before 15.016.20039 on. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

RCE Microsoft Adobe +4
NVD
CVE-2016-1053
EPSS 2% CVSS 9.8
CRITICAL PATCH Act Now

Use-after-free vulnerability in Adobe Reader and Acrobat before 11.0.16, Acrobat and Acrobat Reader DC Classic before 15.006.30172, and Acrobat and Acrobat Reader DC Continuous before 15.016.20039 on. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

RCE Microsoft Adobe +4
NVD
CVE-2016-1052
EPSS 2% CVSS 9.8
CRITICAL PATCH Act Now

Use-after-free vulnerability in Adobe Reader and Acrobat before 11.0.16, Acrobat and Acrobat Reader DC Classic before 15.006.30172, and Acrobat and Acrobat Reader DC Continuous before 15.016.20039 on. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

RCE Microsoft Adobe +4
NVD
CVE-2016-1051
EPSS 2% CVSS 9.8
CRITICAL PATCH Act Now

Use-after-free vulnerability in Adobe Reader and Acrobat before 11.0.16, Acrobat and Acrobat Reader DC Classic before 15.006.30172, and Acrobat and Acrobat Reader DC Continuous before 15.016.20039 on. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

RCE Microsoft Adobe +4
NVD
CVE-2016-1050
EPSS 3% CVSS 9.8
CRITICAL PATCH Act Now

Use-after-free vulnerability in Adobe Reader and Acrobat before 11.0.16, Acrobat and Acrobat Reader DC Classic before 15.006.30172, and Acrobat and Acrobat Reader DC Continuous before 15.016.20039 on. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

RCE Microsoft Adobe +4
NVD
CVE-2016-1049
EPSS 2% CVSS 9.8
CRITICAL PATCH Act Now

Use-after-free vulnerability in Adobe Reader and Acrobat before 11.0.16, Acrobat and Acrobat Reader DC Classic before 15.006.30172, and Acrobat and Acrobat Reader DC Continuous before 15.016.20039 on. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

RCE Microsoft Adobe +4
NVD
CVE-2016-1048
EPSS 2% CVSS 9.8
CRITICAL PATCH Act Now

Use-after-free vulnerability in Adobe Reader and Acrobat before 11.0.16, Acrobat and Acrobat Reader DC Classic before 15.006.30172, and Acrobat and Acrobat Reader DC Continuous before 15.016.20039 on. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

RCE Microsoft Adobe +4
NVD
CVE-2016-1047
EPSS 2% CVSS 9.8
CRITICAL PATCH Act Now

Use-after-free vulnerability in Adobe Reader and Acrobat before 11.0.16, Acrobat and Acrobat Reader DC Classic before 15.006.30172, and Acrobat and Acrobat Reader DC Continuous before 15.016.20039 on. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

RCE Microsoft Adobe +4
NVD
CVE-2016-1046
EPSS 2% CVSS 9.8
CRITICAL PATCH Act Now

Use-after-free vulnerability in Adobe Reader and Acrobat before 11.0.16, Acrobat and Acrobat Reader DC Classic before 15.006.30172, and Acrobat and Acrobat Reader DC Continuous before 15.016.20039 on. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

RCE Microsoft Adobe +4
NVD
CVE-2016-1045
EPSS 2% CVSS 9.8
CRITICAL PATCH Act Now

Use-after-free vulnerability in Adobe Reader and Acrobat before 11.0.16, Acrobat and Acrobat Reader DC Classic before 15.006.30172, and Acrobat and Acrobat Reader DC Continuous before 15.016.20039 on. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

RCE Microsoft Adobe +4
NVD
CVE-2016-1044
EPSS 5% CVSS 10.0
CRITICAL PATCH Act Now

Adobe Reader and Acrobat before 11.0.16, Acrobat and Acrobat Reader DC Classic before 15.006.30172, and Acrobat and Acrobat Reader DC Continuous before 15.016.20039 on Windows and OS X allow. Rated critical severity (CVSS 10.0), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Authentication Bypass Microsoft Adobe +4
NVD
CVE-2016-1043
EPSS 3% CVSS 9.8
CRITICAL PATCH Act Now

Integer overflow in Adobe Reader and Acrobat before 11.0.16, Acrobat and Acrobat Reader DC Classic before 15.006.30172, and Acrobat and Acrobat Reader DC Continuous before 15.016.20039 on Windows and. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Buffer Overflow vulnerability could allow attackers to corrupt memory to execute arbitrary code or crash the application.

RCE Buffer Overflow Microsoft +5
NVD
CVE-2016-1042
EPSS 1% CVSS 9.8
CRITICAL PATCH Act Now

Adobe Reader and Acrobat before 11.0.16, Acrobat and Acrobat Reader DC Classic before 15.006.30172, and Acrobat and Acrobat Reader DC Continuous before 15.016.20039 on Windows and OS X allow. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Authentication Bypass Microsoft Adobe +4
NVD
CVE-2016-1041
EPSS 1% CVSS 10.0
CRITICAL PATCH Act Now

Adobe Reader and Acrobat before 11.0.16, Acrobat and Acrobat Reader DC Classic before 15.006.30172, and Acrobat and Acrobat Reader DC Continuous before 15.016.20039 on Windows and OS X allow. Rated critical severity (CVSS 10.0), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Authentication Bypass Microsoft Adobe +4
NVD
CVE-2016-1040
EPSS 1% CVSS 9.8
CRITICAL PATCH Act Now

Adobe Reader and Acrobat before 11.0.16, Acrobat and Acrobat Reader DC Classic before 15.006.30172, and Acrobat and Acrobat Reader DC Continuous before 15.016.20039 on Windows and OS X allow. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Authentication Bypass Microsoft Adobe +4
NVD
CVE-2016-1039
EPSS 1% CVSS 9.8
CRITICAL PATCH Act Now

Adobe Reader and Acrobat before 11.0.16, Acrobat and Acrobat Reader DC Classic before 15.006.30172, and Acrobat and Acrobat Reader DC Continuous before 15.016.20039 on Windows and OS X allow. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Authentication Bypass Microsoft Adobe +4
NVD
CVE-2016-1038
EPSS 5% CVSS 10.0
CRITICAL PATCH Act Now

Adobe Reader and Acrobat before 11.0.16, Acrobat and Acrobat Reader DC Classic before 15.006.30172, and Acrobat and Acrobat Reader DC Continuous before 15.016.20039 on Windows and OS X allow. Rated critical severity (CVSS 10.0), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Authentication Bypass Microsoft Adobe +4
NVD
CVE-2016-1037
EPSS 2% CVSS 9.8
CRITICAL PATCH Act Now

Adobe Reader and Acrobat before 11.0.16, Acrobat and Acrobat Reader DC Classic before 15.006.30172, and Acrobat and Acrobat Reader DC Continuous before 15.016.20039 on Windows and OS X allow. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Buffer Overflow vulnerability could allow attackers to corrupt memory to execute arbitrary code or crash the application.

RCE Buffer Overflow Denial Of Service +6
NVD
CVE-2016-1111
EPSS 3% CVSS 8.8
HIGH This Week

Double free vulnerability in Adobe Reader and Acrobat before 11.0.14, Acrobat and Acrobat Reader DC Classic before 15.006.30119, and Acrobat and Acrobat Reader DC Continuous before 15.010.20056 on. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

RCE Microsoft Adobe +4
NVD
CVE-2016-1009
EPSS 4% CVSS 9.8
CRITICAL PATCH Act Now

Adobe Reader and Acrobat before 11.0.15, Acrobat and Acrobat Reader DC Classic before 15.006.30121, and Acrobat and Acrobat Reader DC Continuous before 15.010.20060 on Windows and OS X allow. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Buffer Overflow vulnerability could allow attackers to corrupt memory to execute arbitrary code or crash the application.

RCE Buffer Overflow Denial Of Service +6
NVD
CVE-2016-1008
EPSS 1% CVSS 8.4
HIGH PATCH This Week

Untrusted search path vulnerability in Adobe Reader and Acrobat before 11.0.15, Acrobat and Acrobat Reader DC Classic before 15.006.30121, and Acrobat and Acrobat Reader DC Continuous before. Rated high severity (CVSS 8.4), this vulnerability is no authentication required, low attack complexity.

Information Disclosure Microsoft Adobe +4
NVD
CVE-2016-1007
EPSS 4% CVSS 9.8
CRITICAL PATCH Act Now

Adobe Reader and Acrobat before 11.0.15, Acrobat and Acrobat Reader DC Classic before 15.006.30121, and Acrobat and Acrobat Reader DC Continuous before 15.010.20060 on Windows and OS X allow. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Buffer Overflow vulnerability could allow attackers to corrupt memory to execute arbitrary code or crash the application.

RCE Buffer Overflow Denial Of Service +6
NVD
CVE-2016-0947
EPSS 0% CVSS 7.8
HIGH PATCH This Week

Untrusted search path vulnerability in Adobe Download Manager, as used in Adobe Reader and Acrobat before 11.0.14, Acrobat and Acrobat Reader DC Classic before 15.006.30119, and Acrobat and Acrobat. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity.

Information Disclosure Microsoft Adobe +4
NVD
CVE-2016-0946
EPSS 3% CVSS 9.8
CRITICAL PATCH Act Now

Adobe Reader and Acrobat before 11.0.14, Acrobat and Acrobat Reader DC Classic before 15.006.30119, and Acrobat and Acrobat Reader DC Continuous before 15.010.20056 on Windows and OS X allow. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Buffer Overflow vulnerability could allow attackers to corrupt memory to execute arbitrary code or crash the application.

RCE Buffer Overflow Denial Of Service +6
NVD
CVE-2016-0945
EPSS 3% CVSS 9.8
CRITICAL PATCH Act Now

Adobe Reader and Acrobat before 11.0.14, Acrobat and Acrobat Reader DC Classic before 15.006.30119, and Acrobat and Acrobat Reader DC Continuous before 15.010.20056 on Windows and OS X allow. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Buffer Overflow vulnerability could allow attackers to corrupt memory to execute arbitrary code or crash the application.

RCE Buffer Overflow Denial Of Service +6
NVD
CVE-2016-0944
EPSS 3% CVSS 9.8
CRITICAL PATCH Act Now

Adobe Reader and Acrobat before 11.0.14, Acrobat and Acrobat Reader DC Classic before 15.006.30119, and Acrobat and Acrobat Reader DC Continuous before 15.010.20056 on Windows and OS X allow. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Buffer Overflow vulnerability could allow attackers to corrupt memory to execute arbitrary code or crash the application.

RCE Buffer Overflow Denial Of Service +6
NVD
CVE-2016-0943
EPSS 2% CVSS 8.8
HIGH PATCH This Week

Adobe Reader and Acrobat before 11.0.14, Acrobat and Acrobat Reader DC Classic before 15.006.30119, and Acrobat and Acrobat Reader DC Continuous before 15.010.20056 on Windows and OS X mishandle the. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Privilege Escalation Microsoft Adobe +4
NVD
CVE-2016-0942
EPSS 3% CVSS 9.8
CRITICAL PATCH Act Now

Adobe Reader and Acrobat before 11.0.14, Acrobat and Acrobat Reader DC Classic before 15.006.30119, and Acrobat and Acrobat Reader DC Continuous before 15.010.20056 on Windows and OS X allow. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Buffer Overflow vulnerability could allow attackers to corrupt memory to execute arbitrary code or crash the application.

RCE Buffer Overflow Denial Of Service +6
NVD
CVE-2016-0941
EPSS 3% CVSS 8.8
HIGH PATCH This Week

Use-after-free vulnerability in the Search object implementation in Adobe Reader and Acrobat before 11.0.14, Acrobat and Acrobat Reader DC Classic before 15.006.30119, and Acrobat and Acrobat Reader. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

RCE Microsoft Adobe +4
NVD
CVE-2016-0940
EPSS 4% CVSS 9.8
CRITICAL PATCH Act Now

Use-after-free vulnerability in Adobe Reader and Acrobat before 11.0.14, Acrobat and Acrobat Reader DC Classic before 15.006.30119, and Acrobat and Acrobat Reader DC Continuous before 15.010.20056 on. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

RCE Microsoft Adobe +4
NVD
CVE-2016-0939
EPSS 3% CVSS 8.8
HIGH PATCH This Week

Adobe Reader and Acrobat before 11.0.14, Acrobat and Acrobat Reader DC Classic before 15.006.30119, and Acrobat and Acrobat Reader DC Continuous before 15.010.20056 on Windows and OS X allow. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Buffer Overflow vulnerability could allow attackers to corrupt memory to execute arbitrary code or crash the application.

RCE Buffer Overflow Denial Of Service +6
NVD
CVE-2016-0938
EPSS 3% CVSS 8.8
HIGH PATCH This Week

The AcroForm plugin in Adobe Reader and Acrobat before 11.0.14, Acrobat and Acrobat Reader DC Classic before 15.006.30119, and Acrobat and Acrobat Reader DC Continuous before 15.010.20056 on Windows. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Buffer Overflow vulnerability could allow attackers to corrupt memory to execute arbitrary code or crash the application.

RCE Buffer Overflow Denial Of Service +6
NVD
CVE-2016-0937
EPSS 5% CVSS 8.8
HIGH PATCH This Week

Use-after-free vulnerability in the OCG object implementation in Adobe Reader and Acrobat before 11.0.14, Acrobat and Acrobat Reader DC Classic before 15.006.30119, and Acrobat and Acrobat Reader DC. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

RCE Microsoft Adobe +4
NVD
CVE-2016-0936
EPSS 3% CVSS 8.8
HIGH PATCH This Week

Adobe Reader and Acrobat before 11.0.14, Acrobat and Acrobat Reader DC Classic before 15.006.30119, and Acrobat and Acrobat Reader DC Continuous before 15.010.20056 on Windows and OS X allow. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Buffer Overflow vulnerability could allow attackers to corrupt memory to execute arbitrary code or crash the application.

RCE Buffer Overflow Denial Of Service +6
NVD
CVE-2016-0935
EPSS 4% CVSS 8.8
HIGH PATCH This Week

Double free vulnerability in Adobe Reader and Acrobat before 11.0.14, Acrobat and Acrobat Reader DC Classic before 15.006.30119, and Acrobat and Acrobat Reader DC Continuous before 15.010.20056 on. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

RCE Microsoft Adobe +4
NVD
CVE-2016-0934
EPSS 3% CVSS 8.8
HIGH PATCH This Week

Use-after-free vulnerability in AGM.dll in Adobe Reader and Acrobat before 11.0.14, Acrobat and Acrobat Reader DC Classic before 15.006.30119, and Acrobat and Acrobat Reader DC Continuous before. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

RCE Microsoft Adobe +4
NVD
CVE-2016-0933
EPSS 3% CVSS 9.8
CRITICAL PATCH Act Now

Adobe Reader and Acrobat before 11.0.14, Acrobat and Acrobat Reader DC Classic before 15.006.30119, and Acrobat and Acrobat Reader DC Continuous before 15.010.20056 on Windows and OS X allow. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Buffer Overflow vulnerability could allow attackers to corrupt memory to execute arbitrary code or crash the application.

RCE Buffer Overflow Denial Of Service +6
NVD
CVE-2016-0932
EPSS 3% CVSS 8.8
HIGH PATCH This Week

Use-after-free vulnerability in the Doc object implementation in Adobe Reader and Acrobat before 11.0.14, Acrobat and Acrobat Reader DC Classic before 15.006.30119, and Acrobat and Acrobat Reader DC. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

RCE Microsoft Adobe +4
NVD
CVE-2016-0931
EPSS 3% CVSS 8.8
HIGH PATCH This Week

Adobe Reader and Acrobat before 11.0.14, Acrobat and Acrobat Reader DC Classic before 15.006.30119, and Acrobat and Acrobat Reader DC Continuous before 15.010.20056 on Windows and OS X allow. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Buffer Overflow vulnerability could allow attackers to corrupt memory to execute arbitrary code or crash the application.

RCE Buffer Overflow Denial Of Service +6
NVD
CVE-2015-8458
EPSS 3% CVSS 6.8
MEDIUM PATCH This Month

Heap-based buffer overflow in AGM.dll in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2015.006.30094, and Acrobat and Acrobat. Rated medium severity (CVSS 6.8), this vulnerability is remotely exploitable. This Out-of-bounds Write vulnerability could allow attackers to write data beyond allocated buffer boundaries leading to code execution or crashes.

RCE Buffer Overflow Memory Corruption +6
NVD
CVE-2015-7650
EPSS 1% CVSS 6.8
MEDIUM This Month

Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2015.006.30094, and Acrobat and Acrobat Reader DC Continuous before 2015.009.20069. Rated medium severity (CVSS 6.8), this vulnerability is remotely exploitable. No vendor patch available.

RCE Buffer Overflow Denial Of Service +6
NVD
CVE-2015-7829
EPSS 0% CVSS 1.9
LOW PATCH Monitor

Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2015.006.30094, and Acrobat and Acrobat Reader DC Continuous before 2015.009.20069. Rated low severity (CVSS 1.9). This Buffer Overflow vulnerability could allow attackers to corrupt memory to execute arbitrary code or crash the application.

Buffer Overflow Microsoft Adobe +4
NVD
CVE-2015-7624
EPSS 2% CVSS 5.0
MEDIUM PATCH This Month

Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2015.006.30094, and Acrobat and Acrobat Reader DC Continuous before 2015.009.20069. Rated medium severity (CVSS 5.0), this vulnerability is remotely exploitable, low attack complexity. This Exposure of Sensitive Information vulnerability could allow attackers to access sensitive data that should not be disclosed.

Information Disclosure Microsoft Adobe +4
NVD
CVE-2015-7623
EPSS 1% CVSS 6.8
MEDIUM PATCH This Month

The ANAuthenticateResource method in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2015.006.30094, and Acrobat and Acrobat Reader. Rated medium severity (CVSS 6.8), this vulnerability is remotely exploitable.

Authentication Bypass Microsoft Adobe +4
NVD
CVE-2015-7622
EPSS 20% 4.1 CVSS 10.0
CRITICAL POC PATCH THREAT Act Now

Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2015.006.30094, and Acrobat and Acrobat Reader DC Continuous before 2015.009.20069. Rated critical severity (CVSS 10.0), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and EPSS exploitation probability 19.7%.

RCE Buffer Overflow Denial Of Service +6
NVD Exploit-DB
CVE-2015-7621
EPSS 1% CVSS 6.8
MEDIUM PATCH This Month

Use-after-free vulnerability in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2015.006.30094, and Acrobat and Acrobat Reader DC. Rated medium severity (CVSS 6.8), this vulnerability is remotely exploitable. This Use After Free vulnerability could allow attackers to access freed memory to execute arbitrary code or crash the application.

RCE Use After Free Memory Corruption +6
NVD
CVE-2015-7620
EPSS 1% CVSS 6.8
MEDIUM PATCH This Month

The ANSendForBrowserReview method in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2015.006.30094, and Acrobat and Acrobat Reader. Rated medium severity (CVSS 6.8), this vulnerability is remotely exploitable.

Authentication Bypass Microsoft Adobe +4
NVD
CVE-2015-7619
EPSS 2% CVSS 6.8
MEDIUM PATCH This Month

The ANShareFile2 method in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2015.006.30094, and Acrobat and Acrobat Reader DC. Rated medium severity (CVSS 6.8), this vulnerability is remotely exploitable. This Use After Free vulnerability could allow attackers to access freed memory to execute arbitrary code or crash the application.

Authentication Bypass Use After Free Memory Corruption +6
NVD
CVE-2015-7618
EPSS 1% CVSS 6.8
MEDIUM PATCH This Month

The CBAutoConfigCommentRepository method in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2015.006.30094, and Acrobat and Acrobat. Rated medium severity (CVSS 6.8), this vulnerability is remotely exploitable. This Use After Free vulnerability could allow attackers to access freed memory to execute arbitrary code or crash the application.

Authentication Bypass Use After Free Memory Corruption +6
NVD
CVE-2015-7617
EPSS 1% CVSS 6.8
MEDIUM PATCH This Month

Use-after-free vulnerability in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2015.006.30094, and Acrobat and Acrobat Reader DC. Rated medium severity (CVSS 6.8), this vulnerability is remotely exploitable. This Use After Free vulnerability could allow attackers to access freed memory to execute arbitrary code or crash the application.

RCE Use After Free Memory Corruption +6
NVD
CVE-2015-7616
EPSS 1% CVSS 6.8
MEDIUM PATCH This Month

The ANVerifyComments method in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2015.006.30094, and Acrobat and Acrobat Reader DC. Rated medium severity (CVSS 6.8), this vulnerability is remotely exploitable.

Authentication Bypass Microsoft Adobe +4
NVD
CVE-2015-7615
EPSS 1% CVSS 6.8
MEDIUM PATCH This Month

Use-after-free vulnerability in a SaveAs feature in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2015.006.30094, and Acrobat and. Rated medium severity (CVSS 6.8), this vulnerability is remotely exploitable. This Use After Free vulnerability could allow attackers to access freed memory to execute arbitrary code or crash the application.

RCE Use After Free Memory Corruption +6
NVD
CVE-2015-7614
EPSS 1% CVSS 6.8
MEDIUM PATCH This Month

Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2015.006.30094, and Acrobat and Acrobat Reader DC Continuous before 2015.009.20069. Rated medium severity (CVSS 6.8), this vulnerability is remotely exploitable.

Authentication Bypass Microsoft Adobe +4
NVD
CVE-2015-6725
EPSS 1% CVSS 6.8
MEDIUM PATCH This Month

The ANSendForSharedReview method in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2015.006.30094, and Acrobat and Acrobat Reader. Rated medium severity (CVSS 6.8), this vulnerability is remotely exploitable.

Authentication Bypass Microsoft Adobe +4
NVD
CVE-2015-6724
EPSS 1% CVSS 6.8
MEDIUM PATCH This Month

The ANSendForApproval method in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2015.006.30094, and Acrobat and Acrobat Reader DC. Rated medium severity (CVSS 6.8), this vulnerability is remotely exploitable.

Authentication Bypass Microsoft Adobe +4
NVD
CVE-2015-6723
EPSS 1% CVSS 6.8
MEDIUM PATCH This Month

The ANTrustPropagateAll method in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2015.006.30094, and Acrobat and Acrobat Reader DC. Rated medium severity (CVSS 6.8), this vulnerability is remotely exploitable.

Authentication Bypass Microsoft Adobe +4
NVD
CVE-2015-6722
EPSS 1% CVSS 6.8
MEDIUM PATCH This Month

The CBSharedReviewStatusDialog method in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2015.006.30094, and Acrobat and Acrobat. Rated medium severity (CVSS 6.8), this vulnerability is remotely exploitable.

Authentication Bypass Microsoft Adobe +4
NVD
CVE-2015-6721
EPSS 1% CVSS 6.8
MEDIUM PATCH This Month

The CBSharedReviewSecurityDialog method in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2015.006.30094, and Acrobat and Acrobat. Rated medium severity (CVSS 6.8), this vulnerability is remotely exploitable.

Authentication Bypass Microsoft Adobe +4
NVD
CVE-2015-6720
EPSS 1% CVSS 6.8
MEDIUM PATCH This Month

The ANRunSharedReviewEmailStep method in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2015.006.30094, and Acrobat and Acrobat. Rated medium severity (CVSS 6.8), this vulnerability is remotely exploitable.

Authentication Bypass Microsoft Adobe +4
NVD
CVE-2015-6719
EPSS 1% CVSS 6.8
MEDIUM PATCH This Month

The CBSharedReviewCloseDialog method in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2015.006.30094, and Acrobat and Acrobat. Rated medium severity (CVSS 6.8), this vulnerability is remotely exploitable.

Authentication Bypass Microsoft Adobe +4
NVD
CVE-2015-6718
EPSS 1% CVSS 6.8
MEDIUM PATCH This Month

The CBSharedReviewIfOfflineDialog method in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2015.006.30094, and Acrobat and Acrobat. Rated medium severity (CVSS 6.8), this vulnerability is remotely exploitable.

Authentication Bypass Microsoft Adobe +4
NVD
CVE-2015-6717
EPSS 1% CVSS 6.8
MEDIUM PATCH This Month

The DynamicAnnotStore method in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2015.006.30094, and Acrobat and Acrobat Reader DC. Rated medium severity (CVSS 6.8), this vulnerability is remotely exploitable.

Authentication Bypass Microsoft Adobe +4
NVD
CVE-2015-6716
EPSS 1% CVSS 6.8
MEDIUM PATCH This Month

The ANSendForFormDistribution method in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2015.006.30094, and Acrobat and Acrobat. Rated medium severity (CVSS 6.8), this vulnerability is remotely exploitable.

Authentication Bypass Microsoft Adobe +4
NVD
CVE-2015-6715
EPSS 1% CVSS 6.8
MEDIUM PATCH This Month

The Function apply implementation in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2015.006.30094, and Acrobat and Acrobat Reader. Rated medium severity (CVSS 6.8), this vulnerability is remotely exploitable.

Authentication Bypass Microsoft Adobe +4
NVD
CVE-2015-6714
EPSS 1% CVSS 6.8
MEDIUM PATCH This Month

The Function bind implementation in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2015.006.30094, and Acrobat and Acrobat Reader. Rated medium severity (CVSS 6.8), this vulnerability is remotely exploitable.

Authentication Bypass Microsoft Adobe +4
NVD
CVE-2015-6713
EPSS 2% CVSS 7.5
HIGH PATCH This Week

The Function call implementation in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2015.006.30094, and Acrobat and Acrobat Reader. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, low attack complexity.

Authentication Bypass Microsoft Adobe +4
NVD
CVE-2015-6712
EPSS 1% CVSS 6.8
MEDIUM PATCH This Month

The ANSendApprovalToAuthorEnabled method in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2015.006.30094, and Acrobat and Acrobat. Rated medium severity (CVSS 6.8), this vulnerability is remotely exploitable.

Authentication Bypass Microsoft Adobe +4
NVD
CVE-2015-6711
EPSS 1% CVSS 6.8
MEDIUM PATCH This Month

The DoIdentityDialog method in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2015.006.30094, and Acrobat and Acrobat Reader DC. Rated medium severity (CVSS 6.8), this vulnerability is remotely exploitable.

Authentication Bypass Microsoft Adobe +4
NVD
CVE-2015-6710
EPSS 1% CVSS 6.8
MEDIUM PATCH This Month

The CBBBRInit method in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2015.006.30094, and Acrobat and Acrobat Reader DC Continuous. Rated medium severity (CVSS 6.8), this vulnerability is remotely exploitable.

Authentication Bypass Microsoft Adobe +4
NVD
CVE-2015-6709
EPSS 1% CVSS 6.8
MEDIUM PATCH This Month

The CBBBRInvite method in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2015.006.30094, and Acrobat and Acrobat Reader DC. Rated medium severity (CVSS 6.8), this vulnerability is remotely exploitable.

Authentication Bypass Microsoft Adobe +4
NVD
CVE-2015-6708
EPSS 1% CVSS 6.8
MEDIUM PATCH This Month

The ANStartApproval method in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2015.006.30094, and Acrobat and Acrobat Reader DC. Rated medium severity (CVSS 6.8), this vulnerability is remotely exploitable.

Authentication Bypass Microsoft Adobe +4
NVD
CVE-2015-6707
EPSS 1% CVSS 6.8
MEDIUM PATCH This Month

The ANSendForReview method in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2015.006.30094, and Acrobat and Acrobat Reader DC. Rated medium severity (CVSS 6.8), this vulnerability is remotely exploitable.

Authentication Bypass Microsoft Adobe +4
NVD
CVE-2015-6706
EPSS 2% CVSS 5.0
MEDIUM PATCH This Month

Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2015.006.30094, and Acrobat and Acrobat Reader DC Continuous before 2015.009.20069. Rated medium severity (CVSS 5.0), this vulnerability is remotely exploitable, low attack complexity. This Exposure of Sensitive Information vulnerability could allow attackers to access sensitive data that should not be disclosed.

Information Disclosure Microsoft Adobe +4
NVD
CVE-2015-6705
EPSS 2% CVSS 5.0
MEDIUM PATCH This Month

Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2015.006.30094, and Acrobat and Acrobat Reader DC Continuous before 2015.009.20069. Rated medium severity (CVSS 5.0), this vulnerability is remotely exploitable, low attack complexity. This Exposure of Sensitive Information vulnerability could allow attackers to access sensitive data that should not be disclosed.

Information Disclosure Microsoft Adobe +4
NVD
CVE-2015-6704
EPSS 2% CVSS 4.3
MEDIUM PATCH This Month

The animations property implementation in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2015.006.30094, and Acrobat and Acrobat. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable.

Information Disclosure Microsoft Adobe +4
NVD
CVE-2015-6703
EPSS 2% CVSS 4.3
MEDIUM PATCH This Month

The loadFlashMovie function in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2015.006.30094, and Acrobat and Acrobat Reader DC. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable.

Information Disclosure Microsoft Adobe +4
NVD
CVE-2015-6702
EPSS 2% CVSS 4.3
MEDIUM PATCH This Month

The createSquareMesh function in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2015.006.30094, and Acrobat and Acrobat Reader DC. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable.

Information Disclosure Microsoft Adobe +4
NVD
CVE-2015-6701
EPSS 2% CVSS 4.3
MEDIUM PATCH This Month

The ambientIlluminationColor property implementation in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2015.006.30094, and Acrobat. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable.

Information Disclosure Microsoft Adobe +4
NVD
CVE-2015-6700
EPSS 2% CVSS 5.0
MEDIUM PATCH This Month

The setBackground function in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2015.006.30094, and Acrobat and Acrobat Reader DC. Rated medium severity (CVSS 5.0), this vulnerability is remotely exploitable, low attack complexity.

Information Disclosure Microsoft Adobe +4
NVD
CVE-2015-6699
EPSS 2% CVSS 4.3
MEDIUM PATCH This Month

The addForegroundSprite function in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2015.006.30094, and Acrobat and Acrobat Reader. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable.

Information Disclosure Microsoft Adobe +4
NVD
CVE-2015-6698
EPSS 2% CVSS 6.8
MEDIUM PATCH This Month

Heap-based buffer overflow in the AcroForm implementation in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2015.006.30094, and. Rated medium severity (CVSS 6.8), this vulnerability is remotely exploitable. This Out-of-bounds Write vulnerability could allow attackers to write data beyond allocated buffer boundaries leading to code execution or crashes.

RCE Buffer Overflow Memory Corruption +6
NVD
CVE-2015-6697
EPSS 2% CVSS 6.8
MEDIUM PATCH This Month

Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2015.006.30094, and Acrobat and Acrobat Reader DC Continuous before 2015.009.20069. Rated medium severity (CVSS 6.8), this vulnerability is remotely exploitable.

Information Disclosure Microsoft Adobe +4
NVD
CVE-2015-6696
EPSS 2% CVSS 6.8
MEDIUM PATCH This Month

Heap-based buffer overflow in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2015.006.30094, and Acrobat and Acrobat Reader DC. Rated medium severity (CVSS 6.8), this vulnerability is remotely exploitable. This Out-of-bounds Write vulnerability could allow attackers to write data beyond allocated buffer boundaries leading to code execution or crashes.

RCE Buffer Overflow Memory Corruption +6
NVD
Prev Page 10 of 13 Next

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy