Approved changes feed: RSS · Atom

cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:windows:*:*

part: a version: * update: *

VendorAdobe (fb293c1b-cab3-5565-9184-186e4ece530b)
ProductAcrobat Reader (b762a287-a11e-55ca-a2e8-27d38d5d45f3)
Edition*
Language*
Software edition*
Target softwarewindows
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-45112 vulnerable 2026-06-08 06:45:54.778035 Acrobat Reader | Access of Resource Using Incompatible Type ('Type Confusion') (CWE-843)
HIGH (7.8)
Acrobat Reader versions 24.002.21005, 24.001.30159, 20.005.30655, 24.003.20054 and earlier are affected by a Type Confusion vulnerability that could result in arbitrary code execution in the context of the current user. This issue occurs when a resource is accessed using a type that is not compatible with the actual object type, leading to a logic error that an attacker could exploit. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Published: 2024-09-13T08:58:58.128Z
Updated: 2024-09-13T13:42:56.318Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-41879 vulnerable 2026-06-08 06:43:55.402875 RE: New Edge T5 MSRC Case [DCMSFT-1294]
HIGH (7.8)
Acrobat Reader versions 127.0.2651.105 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Published: 2024-08-26T12:01:24.403Z
Updated: 2024-08-26T15:18:22.423Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-41869 vulnerable 2026-06-08 06:43:55.366893 Acrobat Reader | Use After Free (CWE-416)
HIGH (7.8)
Acrobat Reader versions 24.002.21005, 24.001.30159, 20.005.30655, 24.003.20054 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Published: 2024-09-13T08:58:58.898Z
Updated: 2024-09-13T13:43:45.222Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-41835 vulnerable 2026-06-08 06:43:55.309496 TALOS-2024-2003 | Adobe Acrobat Reader Font Packed Point Numbers Out-Of-Bounds Read Vulnerability
MEDIUM (5.5)
Acrobat Reader versions 20.005.30636, 24.002.20965, 24.002.20964, 24.001.30123 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Published: 2024-08-14T15:07:27.209Z
Updated: 2024-08-14T16:03:30.336Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-41834 vulnerable 2026-06-08 06:43:55.308021 ZDI-CAN-24311: Adobe Acrobat Reader DC Annotation Out-Of-Bounds Read Information Disclosure Vulnerability
MEDIUM (5.5)
Acrobat Reader versions 20.005.30636, 24.002.20965, 24.002.20964, 24.001.30123 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Published: 2024-08-14T15:07:27.957Z
Updated: 2024-08-14T15:56:20.215Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-41833 vulnerable 2026-06-08 06:43:55.306943 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-41832 vulnerable 2026-06-08 06:43:55.305334 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-41831 vulnerable 2026-06-08 06:43:55.303705 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-41830 vulnerable 2026-06-08 06:43:55.288998 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-39426 vulnerable 2026-06-08 06:41:49.404831 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-39425 vulnerable 2026-06-08 06:41:49.403592 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-39424 vulnerable 2026-06-08 06:41:49.402258 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-39423 vulnerable 2026-06-08 06:41:49.401064 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-39422 vulnerable 2026-06-08 06:41:49.399727 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-39420 vulnerable 2026-06-08 06:41:49.398757 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-39383 vulnerable 2026-06-08 06:41:49.197538 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.