Adobe Acrobat vulnerabilities
32 vulnerabilities
Known vulnerabilities in Adobe Acrobat, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
RoutineCVE-2026-81984adobe · acrobat 2024 +5 moreAcrobat Reader | Use After Free (CWE-416)Acrobat Reader is affected by a Use After Free vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue requires user interaction in that a victim must open a malicious file.CVSS5.5MediumEPSS0.33%RoutineCVE-2026-81989adobe · acrobat 2024 +5 moreAcrobat Reader | Use After Free (CWE-416)Acrobat Reader is affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.CVSS7.8HighEPSS0.38%RoutineCVE-2026-81991adobe · acrobat 2024 +5 moreAcrobat Reader | Out-of-bounds Read (CWE-125)Acrobat Reader is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue requires user interaction in that a victim must open a malicious file.CVSS5.5MediumEPSS0.26%RoutineCVE-2026-81980adobe · acrobat 2024 +5 moreAcrobat Reader | Out-of-bounds Write (CWE-787)Acrobat Reader is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.CVSS7.8HighEPSS0.26%RoutineCVE-2026-81990adobe · acrobat 2024 +5 moreAcrobat Reader | Use After Free (CWE-416)Acrobat Reader is affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.CVSS7.8HighEPSS0.38%RoutineCVE-2026-81987adobe · acrobat 2024 +5 moreAcrobat Reader | Integer Overflow or Wraparound (CWE-190)Acrobat Reader is affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.CVSS7.8HighEPSS0.31%RoutineCVE-2026-79910adobe · acrobat 2024 +5 moreAcrobat Reader | Out-of-bounds Read (CWE-125)Acrobat Reader is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue requires user interaction in that a victim must open a malicious file.CVSS5.5MediumEPSS0.26%RoutineCVE-2026-81993adobe · acrobat 2024 +5 moreAcrobat Reader | Heap-based Buffer Overflow (CWE-122)Acrobat Reader is affected by a Heap-based Buffer Overflow vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue requires user interaction in that a victim must open a malicious file.CVSS5.5MediumEPSS0.30%RoutineCVE-2026-79907adobe · acrobat 2024 +5 moreAcrobat Reader | Double Free (CWE-415)Acrobat Reader is affected by a Double Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.CVSS7.8HighEPSS0.29%RoutineCVE-2026-79909adobe · acrobat 2024 +5 moreAcrobat Reader | Use After Free (CWE-416)Acrobat Reader is affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.CVSS7.8HighEPSS0.38%RoutineCVE-2026-80159adobe · acrobat 2024 +5 moreAcrobat Reader | Untrusted Search Path (CWE-426)Acrobat Reader is affected by an Untrusted Search Path vulnerability that could result in privilege escalation. An attacker with high privileges could leverage this vulnerability to gain elevated access. Exploit depends on conditions beyond the attacker's control. Exploitation of this issue requires user interaction in that a victim must open a malicious file.CVSS4.0MediumEPSS0.19%RoutineCVE-2026-81973adobe · acrobat 2024 +5 moreAcrobat Reader | Use After Free (CWE-416)Acrobat Reader is affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.CVSS7.8HighEPSS0.38%RoutineCVE-2026-81988adobe · acrobat 2024 +5 moreAcrobat Reader | Use After Free (CWE-416)Acrobat Reader is affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.CVSS7.8HighEPSS0.38%RoutineCVE-2026-81977adobe · acrobat 2024 +5 moreAcrobat Reader | Integer Underflow (Wrap or Wraparound) (CWE-191)Acrobat Reader is affected by an Integer Underflow (Wrap or Wraparound) vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue requires user interaction in that a victim must open a malicious file.CVSS5.5MediumEPSS0.26%RoutineCVE-2026-80162adobe · acrobat 2024 +5 moreAcrobat Reader | Use After Free (CWE-416)Acrobat Reader is affected by a Use After Free vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue requires user interaction in that a victim must open a malicious file.CVSS5.5MediumEPSS0.33%RoutineCVE-2026-81986adobe · acrobat 2024 +5 moreAcrobat Reader | Use After Free (CWE-416)Acrobat Reader is affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.CVSS7.8HighEPSS0.38%RoutineCVE-2026-81981adobe · acrobat 2024 +5 moreAcrobat Reader | Out-of-bounds Write (CWE-787)Acrobat Reader is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.CVSS7.8HighEPSS0.26%RoutineCVE-2026-80161adobe · acrobat 2024 +5 moreAcrobat Reader | Access of Resource Using Incompatible Type ('Type Confusion') (CWE-843)Acrobat Reader is affected by an Access of Resource Using Incompatible Type ('Type Confusion') vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue requires user interaction in that a victim must open a malicious file.CVSS7.8HighEPSS0.29%RoutineCVE-2026-81997adobe · acrobat 2024 +5 moreAcrobat Reader | Incorrect Authorization (CWE-863)Acrobat Reader is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Scope is changed.CVSS6.3MediumEPSS0.24%RoutineCVE-2026-81976adobe · acrobat 2024 +5 moreAcrobat Reader | Use After Free (CWE-416)Acrobat Reader is affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.CVSS7.8HighEPSS0.38%