13 source-linked records in the current knowledge graph.
Adobe Acrobat and Reader contain a heap-based buffer overflow vulnerability which could allow remote attackers to execute arbitrary code via a crafted PDF file that triggers memory corruption. Required action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
CISA KEV ↗ · unattributed attributionAdobe Acrobat and Reader contain a prototype pollution vulnerability that allows for arbitrary code execution. Required action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
CISA KEV ↗ · unattributed attributionAdobe Acrobat and Reader contains a use-after-free vulnerability that allows for code execution in the context of the current user. Required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
CISA KEV ↗ · unattributed attributionAdobe Acrobat and Reader contains an out-of-bounds write vulnerability that allows for code execution. Required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
CISA KEV ↗ · unattributed attributionAdobe Acrobat and Reader have a double free vulnerability that could lead to remote code execution. Required action: Apply updates per vendor instructions.
CISA KEV ↗ · unattributed attributionAdobe Acrobat and Reader contain a stack-based buffer overflow vulnerability that allows remote attackers to execute code or cause denial-of-service (DoS). Required action: Apply updates per vendor instructions.
CISA KEV ↗ · unattributed attributionUse-after-free vulnerability in Adobe Acrobat and Reader allows remote attackers to execute code via a crafted PDF file. Required action: Apply updates per vendor instructions.
CISA KEV ↗ · unattributed attributionAdobe Acrobat and Reader contains an array boundary issue in Universal 3D (U3D) support that could lead to remote code execution. Required action: Apply updates per vendor instructions.
CISA KEV ↗ · unattributed attributionAdobe Acrobat and Reader contains an unespecified vulnerability described as a design flaw which could allow a specially crafted file to be printed silently an arbitrary number of times. Required action: Apply updates per vendor instructions.
CISA KEV ↗ · unattributed attributionAdobe Acrobat and Reader contain a buffer overflow vulnerability that allows remote attackers to execute code via a PDF file with long arguments to unspecified JavaScript methods. Required action: Apply updates per vendor instructions.
CISA KEV ↗ · unattributed attributionAdobe Acrobat and Reader contain an input validation issue in a JavaScript method that could potentially lead to remote code execution. Required action: Apply updates per vendor instructions.
CISA KEV ↗ · unattributed attributionAcrobat Acrobat and Reader contain a heap-based buffer overflow vulnerability that could allow an unauthenticated attacker to achieve code execution in the context of the current user. Required action: Apply updates per vendor instructions.
CISA KEV ↗ · unattributed attributionAdobe Acrobat and Reader contains a use-after-free vulnerability that could allow an unauthenticated attacker to achieve code execution in the context of the current user. Required action: Apply updates per vendor instructions.
CISA KEV ↗ · unattributed attribution