Adobe Acrobat 2024 vulnerabilities, page 3
60 vulnerabilities
Known vulnerabilities in Adobe Acrobat 2024, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
RoutineCVE-2026-47917adobe · acrobat 2024 +3 moreAcrobat Reader | Use After Free (CWE-416)Acrobat Reader versions 24.001.30365, 26.001.21651 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.CVSS7.8HighEPSS0.31%RoutineCVE-2026-47955adobe · acrobat 2024 +3 moreAcrobat Reader | Use After Free (CWE-416)Acrobat Reader versions 24.001.30365, 26.001.21651 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.CVSS7.8HighEPSS0.17%RoutineCVE-2026-47924adobe · acrobat 2024 +3 moreAcrobat Reader | Use After Free (CWE-416)Acrobat Reader versions 24.001.30365, 26.001.21651 and earlier are affected by a Use After Free vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue requires user interaction in that a victim must open a malicious file.CVSS5.5MediumEPSS0.29%RoutineCVE-2026-47919adobe · acrobat 2024 +3 moreAcrobat Reader | Use After Free (CWE-416)Acrobat Reader versions 24.001.30365, 26.001.21651 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.CVSS7.8HighEPSS0.30%RoutineCVE-2026-47926adobe · acrobat 2024 +3 moreAcrobat Reader | Out-of-bounds Read (CWE-125)Acrobat Reader versions 24.001.30365, 26.001.21651 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue requires user interaction in that a victim must open a malicious file.CVSS5.5MediumEPSS0.18%RoutineCVE-2026-47921adobe · acrobat 2024 +3 moreAcrobat Reader | Use After Free (CWE-416)Acrobat Reader versions 24.001.30365, 26.001.21651 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.CVSS7.8HighEPSS0.17%RoutineCVE-2026-47920adobe · acrobat 2024 +3 moreAcrobat Reader | Use After Free (CWE-416)Acrobat Reader versions 24.001.30365, 26.001.21651 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.CVSS7.8HighEPSS0.17%RoutineCVE-2026-47961adobe · acrobat 2024 +4 moreAcrobat Reader | Out-of-bounds Read (CWE-125)Acrobat Reader versions 24.001.30365, 26.001.21651 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue requires user interaction in that a victim must open a malicious file.CVSS5.5MediumEPSS0.15%RoutineCVE-2026-47913adobe · acrobat 2024 +4 moreAcrobat Reader | Use After Free (CWE-416)Acrobat Reader versions 24.001.30365, 26.001.21651 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.CVSS7.8HighEPSS0.33%RoutineCVE-2026-47914adobe · acrobat 2024 +4 moreAcrobat Reader | Use After Free (CWE-416)Acrobat Reader versions 24.001.30365, 26.001.21651 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.CVSS7.8HighEPSS0.33%RoutineCVE-2026-47925adobe · acrobat 2024 +3 moreAcrobat Reader | Integer Overflow or Wraparound (CWE-190)Acrobat Reader versions 24.001.30365, 26.001.21651 and earlier are affected by an Integer Overflow or Wraparound vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue requires user interaction in that a victim must open a malicious file.CVSS5.5MediumEPSS0.17%RoutineCVE-2026-47912adobe · acrobat 2024 +4 moreAcrobat Reader | Use After Free (CWE-416)Acrobat Reader versions 24.001.30365, 26.001.21651 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.CVSS7.8HighEPSS0.33%RoutineCVE-2026-47959adobe · acrobat 2024 +4 moreAcrobat Reader | Stack-based Buffer Overflow (CWE-121)Acrobat Reader versions 24.001.30365, 26.001.21651 and earlier are affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.CVSS7.8HighEPSS0.17%RoutineCVE-2026-47911adobe · acrobat 2024 +4 moreAcrobat Reader | Out-of-bounds Write (CWE-787)Acrobat Reader versions 24.001.30365, 26.001.21651 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.CVSS7.8HighEPSS0.28%RoutineCVE-2026-34622adobe · acrobat 2024 +3 moreAcrobat Reader | Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') (CWE-1321)Acrobat Reader versions 26.001.21411, 24.001.30360, 24.001.30362 and earlier are affected by an Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.CVSS8.6HighEPSS0.42%RoutineCVE-2026-34626adobe · acrobat 2024 +3 moreAcrobat Reader | Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') (CWE-1321)Acrobat Reader versions 26.001.21411, 24.001.30360, 24.001.30362 and earlier are affected by an Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') vulnerability that could result in arbitrary file system read in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.CVSS6.3MediumEPSS0.34%Act nowCVE-2026-34621Adobe · Acrobat and Reader +4 moreAdobe Acrobat and Reader Prototype Pollution VulnerabilityAcrobat Reader versions 24.001.30356, 26.001.21367 and earlier are affected by an Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.CVSS8.6HighKEVEPSS7.23%RoutineCVE-2026-27221adobe · acrobat 2024 +3 moreAcrobat Reader | Improper Certificate Validation (CWE-295)Acrobat Reader versions 24.001.30307, 24.001.30308, 25.001.21265 and earlier are affected by an Improper Certificate Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to spoof the identity of a signer. Exploitation of this issue requires user interaction.CVSS5.5MediumEPSS0.11%RoutineCVE-2026-27278adobe · acrobat 2024 +3 moreAcrobat Reader | Use After Free (CWE-416)Acrobat Reader versions 24.001.30307, 24.001.30308, 25.001.21265 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.CVSS7.8HighEPSS0.23%RoutineCVE-2026-27220adobe · acrobat 2024 +3 moreAcrobat Reader | Use After Free (CWE-416)Acrobat Reader versions 24.001.30307, 24.001.30308, 25.001.21265 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.CVSS7.8HighEPSS0.37%