Class familyAdobe · Acrobat and Reader
Adobe Acrobat and Reader heap buffer overflow flaws, 2009–2026
15 Acrobat and Reader CVEs with CWE-122 weaknesses, 13 Oct 2009 to 8 Sep 2026. 2 are in CISA KEVThe US Cybersecurity and Infrastructure Security Agency’s list of Known Exploited Vulnerabilities. A CVE is added when CISA has evidence that attackers are using it..
CVEs by year
Published each year. Select a CVE to open it.Grouped by product and weakness type (CWE); not proven to share a root cause.
1 2009’09
2010’10
2011’11
2012’12
2013’13
2014’14
2015’15
2016’16
2017’17
2018’18
2019’19
1 2020’20
5 2021’21
3 2022’22
1 2023’23
2024’24
2025’25
4 2026’26
In CISA KEVNot in KEV
20091 CVE, 1 in KEV
20201 CVE
20215 CVEs, 1 in KEV
20223 CVEs
20231 CVE
20264 CVEs
CVEs in this family
Table view of the years above| CVE | Published | Title | Linked from | Priority |
|---|---|---|---|---|
| CVE-2009-3459KEV | 13 Oct 2009 | Adobe Acrobat and Reader Heap-Based Buffer Overflow Vulnerability | Grouped by weakness | 69.1 |
| CVE-2020-24435 | 5 Nov 2020 | Acrobat Reader DC Heap-based Buffer Overflow Could Lead to Arbitrary Code Execution | Grouped by weakness | 25.3 |
| CVE-2021-21017KEV | 11 Feb 2021 | Adobe Acrobat and Reader Heap-based Buffer Overflow Vulnerability | Grouped by weakness | 69.1 |
| CVE-2021-28638 | 20 Aug 2021 | Adobe Acrobat Reader DC PDF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability | Grouped by weakness | 23.9 |
| CVE-2021-28558 | 2 Sep 2021 | Adobe Acrobat Reader heap-based buffer overflow could lead to arbitrary code execution | Grouped by weakness | 25.3 |
| CVE-2021-28560 | 2 Sep 2021 | Adobe Acrobat Reader heap corruption vulnerability could lead to arbitrary code execution | Grouped by weakness | 26.0 |
| CVE-2021-39863 | 29 Sep 2021 | Adobe Acrobat Reader DC Heap-based Buffer Overflow Vulnerability Could Lead To Arbitrary Code Execution | Grouped by weakness | 29.7 |
| CVE-2021-44708 | 14 Jan 2022 | Adobe Acrobat Pro DC Heap Overflow could lead to Arbitrary code execution | Grouped by weakness | 25.2 |
| CVE-2021-44709 | 14 Jan 2022 | Adobe Acrobat Pro DC Heap Overflow Vulnerability could lead to Arbitrary code execution | Grouped by weakness | 25.1 |
| CVE-2022-28234 | 11 May 2022 | Adobe Acrobat Reader DC Heap Overflow Could Lead to RCE | Grouped by weakness | 24.0 |
| CVE-2023-21605 | 18 Jan 2023 | Adobe Acrobat Reader DC Font Parsing Heap-based Buffer Overflow Arbitrary code execution | Grouped by weakness | 22.5 |
| CVE-2026-47952 | 9 Jun 2026 | Acrobat Reader | Heap-based Buffer Overflow (CWE-122) | Grouped by weakness | 6.8 |
| CVE-2026-48373 | 17 Jul 2026 | Acrobat Reader | Heap-based Buffer Overflow (CWE-122) | Grouped by weakness | 10.9 |
| CVE-2026-81992 | 8 Sep 2026 | Acrobat Reader | Heap-based Buffer Overflow (CWE-122) | Grouped by weakness | 10.9 |
| CVE-2026-81993 | 8 Sep 2026 | Acrobat Reader | Heap-based Buffer Overflow (CWE-122) | Grouped by weakness | 8.4 |