Class familyAdobe · Reader and Acrobat
Adobe Acrobat and Reader out-of-bounds write flaws, 2008–2026
64 Reader and Acrobat CVEs with CWE-787 weaknesses, 4 Nov 2008 to 20 Oct 2026. 9 are in CISA KEVThe US Cybersecurity and Infrastructure Security Agency’s list of Known Exploited Vulnerabilities. A CVE is added when CISA has evidence that attackers are using it..
CVEs by year
Published each year. Select a CVE to open it.Grouped by product and weakness type (CWE); not proven to share a root cause.
1 2008’08
1 2009’09
2 2010’10
1 2011’11
2012’12
2 2013’13
2014’14
2015’15
2016’16
2017’17
2018’18
2019’19
1 2020’20
14 2021’21
13 2022’22
10 2023’23
9 2024’24
1 2025’25
9 2026’26
In CISA KEVNot in KEV
20081 CVE, 1 in KEV
20091 CVE, 1 in KEV
20102 CVEs, 2 in KEV
20111 CVE, 1 in KEV
20132 CVEs, 2 in KEV
20201 CVE
202114 CVEs, 1 in KEV
202213 CVEs
202310 CVEs, 1 in KEV
20249 CVEs
20251 CVE
20269 CVEs
CVEs in this family
Table view of the years above| CVE | Published | Title | Linked from | Priority |
|---|---|---|---|---|
| CVE-2008-2992KEV | 4 Nov 2008 | Adobe Reader and Acrobat Input Validation Vulnerability | Grouped by weakness | 78.5 |
| CVE-2009-1862KEV | 23 Jul 2009 | Adobe Acrobat and Reader, Flash Player Unspecified Vulnerability | Grouped by weakness | 48.0 |
| CVE-2009-3953KEV | 13 Jan 2010 | Adobe Acrobat and Reader Universal 3D Remote Code Execution Vulnerability | Grouped by weakness | 54.1 |
| CVE-2010-2883KEV | 9 Sep 2010 | Adobe Acrobat and Reader Stack-Based Buffer Overflow Vulnerability | Grouped by weakness | 56.9 |
| CVE-2011-2462KEV | 7 Dec 2011 | Adobe Reader and Acrobat Universal 3D Memory Corruption Vulnerability | Grouped by weakness | 58.7 |
| CVE-2013-0640KEV | 14 Feb 2013 | Adobe Reader and Acrobat Memory Corruption Vulnerability | Grouped by weakness | 57.3 |
| CVE-2013-3346KEV | 30 Aug 2013 | Adobe Reader and Acrobat Memory Corruption Vulnerability | Grouped by weakness | 54.8 |
| CVE-2020-24436 | 5 Nov 2020 | Acrobat Pro DC PDF Export Out-Of-Bounds Write Vulnerability Could Lead to Arbitrary Code Execution | Grouped by weakness | 24.9 |
| CVE-2021-21017KEV | 11 Feb 2021 | Adobe Acrobat and Reader Heap-based Buffer Overflow Vulnerability | Grouped by weakness | 69.1 |
| CVE-2021-21038 | 11 Feb 2021 | Acrobat Reader DC Out-Of-Bounds Write Vulnerability Could Lead To Arbitrary Code Execution | Grouped by weakness | 23.1 |
| CVE-2021-21044 | 11 Feb 2021 | Acrobat Reader DC Out-Of-Bounds Write Vulnerability Could Lead To Arbitrary Code Execution | Grouped by weakness | 23.3 |
| CVE-2021-21046 | 11 Feb 2021 | Acrobat Reader DC Buffer Overflow Vulnerability Could Lead To Arbitrary Code Execution | Grouped by weakness | 17.8 |
| CVE-2021-21058 | 11 Feb 2021 | Acrobat Reader DC Memory Corruption Vulnerability Could Lead to Arbitrary Code Execution | Grouped by weakness | 22.5 |
| CVE-2021-21059 | 11 Feb 2021 | Acrobat Reader DC Buffer Overflow Vulnerability Could Lead to Arbitrary Code Execution | Grouped by weakness | 22.5 |
| CVE-2021-21062 | 11 Feb 2021 | Acrobat Reader DC Buffer Overflow Vulnerability Could Lead To Arbitrary Code Execution | Grouped by weakness | 22.5 |
| CVE-2021-21063 | 11 Feb 2021 | Acrobat Reader DC Buffer Overflow Vulnerability Could Lead to Arbitrary Code Execution | Grouped by weakness | 22.5 |
| CVE-2021-28642 | 20 Aug 2021 | Adobe Acrobat Pro DC Out-of-Bounds Write Arbitrary Code Execution Vulnerability | Grouped by weakness | 24.1 |
| CVE-2021-21086 | 2 Sep 2021 | Adobe Reader CoolType Arbitrary Stack Manipulation | Grouped by weakness | 28.8 |
| CVE-2021-28561 | 2 Sep 2021 | Adobe Acrobat Reader memory corruption vulnerability could lead to remote code execution | Grouped by weakness | 23.8 |
| CVE-2021-28564 | 2 Sep 2021 | Adobe Acrobat Reader out-of-bounds write vulnerability could lead to arbitrary code execution | Grouped by weakness | 24.0 |
| CVE-2021-39843 | 29 Sep 2021 | Adobe Acrobat Reader XObject Out-of-Bound Write Vulnerability | Grouped by weakness | 25.4 |
| CVE-2021-40731 | 15 Oct 2021 | Adobe Acrobat Reader DC JPEG2000 Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability | Grouped by weakness | 24.4 |
| CVE-2021-44707 | 14 Jan 2022 | Adobe Acrobat Reader DC OTF Font Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability | Grouped by weakness | 24.5 |
| CVE-2021-45061 | 14 Jan 2022 | Adobe Acrobat Reader DC Font Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability | Grouped by weakness | 24.4 |
| CVE-2021-45068 | 14 Jan 2022 | Adobe Acrobat Reader DC Font Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability | Grouped by weakness | 24.7 |
| CVE-2022-24091 | 18 Mar 2022 | Adobe Acrobat Reader DC Font Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability | Grouped by weakness | 23.6 |
| CVE-2022-24092 | 18 Mar 2022 | Adobe Acrobat Reader DC Font Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability | Grouped by weakness | 23.8 |
| CVE-2022-27787 | 11 May 2022 | Adobe Acrobat Reader DC Font Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability | Grouped by weakness | 24.6 |
| CVE-2022-27788 | 11 May 2022 | Adobe Acrobat Reader DC Font Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability | Grouped by weakness | 23.1 |
| CVE-2022-27792 | 11 May 2022 | Adobe Acrobat Reader DC Font Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability | Grouped by weakness | 24.6 |
| CVE-2022-27793 | 11 May 2022 | Adobe Acrobat Reader DC Font Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability | Grouped by weakness | 24.6 |
| CVE-2022-27798 | 11 May 2022 | Adobe Acrobat Reader DC zoomType Out-Of-Bounds Write Remote Code Execution Vulnerability | Grouped by weakness | 23.1 |
| CVE-2022-28236 | 11 May 2022 | Adobe Acrobat Reader DC Annotation Out-Of-Bounds Write Remote Code Execution Vulnerability | Grouped by weakness | 24.7 |
| CVE-2022-34217 | 15 Jul 2022 | Adobe Acrobat Reader DC Font Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability | Grouped by weakness | 23.0 |
| CVE-2022-35667 | 11 Aug 2022 | Adobe Acrobat Reader DC Font Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability | Grouped by weakness | 22.5 |
| CVE-2023-21606 | 18 Jan 2023 | Adobe Acrobat Reader DC Font Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability | Grouped by weakness | 22.4 |
| CVE-2023-21609 | 18 Jan 2023 | Adobe Acrobat Reader DC AcroForm Annotation Out-Of-Bounds Write Remote Code Execution Vulnerability | Grouped by weakness | 21.8 |
| CVE-2023-22240 | 27 Jan 2023 | ZDI-CAN-19517: Adobe Acrobat Reader DC AcroForm Annotation Out-Of-Bounds Write Remote Code Execution Vulnerability | Grouped by weakness | 11.3 |
| CVE-2023-22241 | 27 Jan 2023 | ZDI-CAN-19516: Adobe Acrobat Reader DC AcroForm Annotation Out-Of-Bounds Write Remote Code Execution Vulnerability | Grouped by weakness | 11.3 |
| CVE-2023-22242 | 27 Jan 2023 | ZDI-CAN-19515: Adobe Acrobat Reader DC AcroForm Annotation Out-Of-Bounds Write Remote Code Execution Vulnerability | Grouped by weakness | 14.1 |
| CVE-2023-26395 | 12 Apr 2023 | Adobe Acrobat parsing PDF Out-of-bounds Write Arbitrary code execution | Grouped by weakness | 21.8 |
| CVE-2023-38231 | 10 Aug 2023 | ZDI-CAN-21334: Adobe Acrobat Reader DC Font Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability | Grouped by weakness | 22.7 |
| CVE-2023-38233 | 10 Aug 2023 | ZDI-CAN-21337: Adobe Acrobat Reader DC Font Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability | Grouped by weakness | 22.7 |
| CVE-2023-26369KEV | 13 Sep 2023 | Adobe Acrobat and Reader Out-of-Bounds Write Vulnerability | Grouped by weakness | 62.3 |
| CVE-2023-44366 | 16 Nov 2023 | ZDI-CAN-21928: Adobe Acrobat Reader DC Font Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability | Grouped by weakness | 21.3 |
| CVE-2024-20726 | 15 Feb 2024 | [TianfuCup] JP2K Image Parsing Out-Of-Bounds Write | Grouped by weakness | 22.2 |
| CVE-2024-20727 | 15 Feb 2024 | [TianfuCup] out-of-bounds access vulnerability when parsing jpeg2000 | Grouped by weakness | 21.6 |
| CVE-2024-20728 | 15 Feb 2024 | ZDI-CAN-22727: Adobe Acrobat Pro DC Annotation Out-Of-Bounds Write Remote Code Execution Vulnerability | Grouped by weakness | 22.7 |
| CVE-2024-30310 | 15 May 2024 | ZDI-CAN-23327: Adobe Acrobat Reader DC PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability | Grouped by weakness | 22.8 |
| CVE-2024-30279 | 23 May 2024 | ZDI-CAN-22887: Adobe Acrobat Reader DC JPEG2000 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability | Grouped by weakness | 24.1 |
| CVE-2024-39423 | 14 Aug 2024 | ZDI-CAN-24182: New Vulnerability Report - Adobe Acrobat Reader DC AcroForm Annotation Out-Of-Bounds Write Remote Code… | Grouped by weakness | 23.5 |
| CVE-2024-41879 | 26 Aug 2024 | RE: New Edge T5 MSRC Case [DCMSFT-1294] | Grouped by weakness | 13.8 |
| CVE-2022-44512 | 18 Dec 2024 | Acrobat Reader | Out-of-bounds Write (CWE-787) | Grouped by weakness | 9.9 |
| CVE-2022-44513 | 18 Dec 2024 | Acrobat Reader | Out-of-bounds Write (CWE-787) | Grouped by weakness | 9.9 |
| CVE-2025-43575 | 10 Jun 2025 | Acrobat Reader | Out-of-bounds Write (CWE-787) | Grouped by weakness | 11.6 |
| CVE-2026-47911 | 9 Jun 2026 | Acrobat Reader | Out-of-bounds Write (CWE-787) | Grouped by weakness | 9.5 |
| CVE-2026-47965 | 12 Jun 2026 | Acrobat Reader | Out-of-bounds Write (CWE-787) | Grouped by weakness | 6.3 |
| CVE-2020-9695 | 23 Jun 2026 | Acrobat Reader | Out-of-bounds Write (CWE-787) | Grouped by weakness | 9.0 |
| CVE-2026-79908 | 8 Sep 2026 | Acrobat Reader | Out-of-bounds Write (CWE-787) | Grouped by weakness | 8.9 |
| CVE-2026-81979 | 8 Sep 2026 | Acrobat Reader | Out-of-bounds Write (CWE-787) | Grouped by weakness | 8.9 |
| CVE-2026-81980 | 8 Sep 2026 | Acrobat Reader | Out-of-bounds Write (CWE-787) | Grouped by weakness | 8.9 |
| CVE-2026-81981 | 8 Sep 2026 | Acrobat Reader | Out-of-bounds Write (CWE-787) | Grouped by weakness | 8.9 |
| CVE-2026-81983 | 8 Sep 2026 | Acrobat Reader | Out-of-bounds Write (CWE-787) | Grouped by weakness | 8.9 |
| CVE-2026-100134 | 20 Oct 2026 | Acrobat for Edge | Out-of-bounds Write (CWE-787) | Grouped by weakness | 17.4 |