Vulnerabilities > Adobe > Acrobat Reader DC > High

DATE CVE VULNERABILITY TITLE RISK
2018-09-25 CVE-2018-12848 Out-of-bounds Write vulnerability in Adobe Acrobat DC and Acrobat Reader DC
Adobe Acrobat and Reader versions 2018.011.20058 and earlier, 2017.011.30099 and earlier, and 2015.006.30448 and earlier have an out-of-bounds write vulnerability.
network
low complexity
adobe apple microsoft CWE-787
7.5
2018-08-29 CVE-2018-12808 Out-of-bounds Write vulnerability in Adobe Acrobat DC and Acrobat Reader DC
Adobe Acrobat and Reader versions 2018.011.20055 and earlier, 2017.011.30096 and earlier, and 2015.006.30434 and earlier have an out-of-bounds write vulnerability.
network
low complexity
adobe apple microsoft CWE-787
7.5
2018-07-20 CVE-2018-12785 Out-of-bounds Write vulnerability in Adobe Acrobat DC and Acrobat Reader DC
Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418 and earlier versions have a Heap Overflow vulnerability.
network
low complexity
adobe apple microsoft CWE-787
7.5
2018-07-20 CVE-2018-12784 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Adobe Acrobat DC and Acrobat Reader DC
Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418 and earlier versions have a Buffer Errors vulnerability.
network
low complexity
adobe apple microsoft CWE-119
7.5
2018-07-09 CVE-2018-4995 Injection vulnerability in Adobe Acrobat DC and Acrobat Reader DC
Adobe Acrobat and Reader versions 2018.011.20038 and earlier, 2017.011.30079 and earlier, and 2015.006.30417 and earlier have an XFA '\n' POST injection vulnerability.
network
low complexity
adobe apple microsoft CWE-74
7.5
2016-05-11 CVE-2016-4106 Remote Code Execution vulnerability in Adobe Reader and Acrobat APSB16-14
Untrusted search path vulnerability in Adobe Reader and Acrobat before 11.0.16, Acrobat and Acrobat Reader DC Classic before 15.006.30172, and Acrobat and Acrobat Reader DC Continuous before 15.016.20039 on Windows and OS X allows local users to gain privileges via a Trojan horse resource in an unspecified directory, a different vulnerability than CVE-2016-1087 and CVE-2016-1090.
local
low complexity
apple microsoft adobe
7.2
2016-05-11 CVE-2016-1090 Remote Code Execution vulnerability in Adobe Reader and Acrobat APSB16-14
Untrusted search path vulnerability in Adobe Reader and Acrobat before 11.0.16, Acrobat and Acrobat Reader DC Classic before 15.006.30172, and Acrobat and Acrobat Reader DC Continuous before 15.016.20039 on Windows and OS X allows local users to gain privileges via a Trojan horse resource in an unspecified directory, a different vulnerability than CVE-2016-1087 and CVE-2016-4106.
local
low complexity
apple microsoft adobe
7.2
2016-05-11 CVE-2016-1087 Remote Code Execution vulnerability in Adobe Reader and Acrobat APSB16-14
Untrusted search path vulnerability in Adobe Reader and Acrobat before 11.0.16, Acrobat and Acrobat Reader DC Classic before 15.006.30172, and Acrobat and Acrobat Reader DC Continuous before 15.016.20039 on Windows and OS X allows local users to gain privileges via a Trojan horse resource in an unspecified directory, a different vulnerability than CVE-2016-1090 and CVE-2016-4106.
local
low complexity
apple microsoft adobe
7.2
2016-03-09 CVE-2016-1008 Improper Input Validation vulnerability in Adobe products
Untrusted search path vulnerability in Adobe Reader and Acrobat before 11.0.15, Acrobat and Acrobat Reader DC Classic before 15.006.30121, and Acrobat and Acrobat Reader DC Continuous before 15.010.20060 on Windows and OS X allows local users to gain privileges via a Trojan horse DLL in an unspecified directory.
local
low complexity
adobe apple microsoft CWE-20
7.2
2016-01-14 CVE-2016-0947 Remote Code Execution vulnerability in Adobe Acrobat and Reader
Untrusted search path vulnerability in Adobe Download Manager, as used in Adobe Reader and Acrobat before 11.0.14, Acrobat and Acrobat Reader DC Classic before 15.006.30119, and Acrobat and Acrobat Reader DC Continuous before 15.010.20056 on Windows and OS X, allows local users to gain privileges via a crafted resource in an unspecified directory.
local
low complexity
adobe apple microsoft
7.2