Adobe Acrobat and Reader versions 2019.008.20081 and earlier, 2019.008.20080 and earlier, 2019.008.20081 and earlier, 2017.011.30106 and ear

Affected versions

NVD version ranges (for catalog products). Add the product to your stack with a version and matching uses these.

• adobe acrobat dc15.006.30060 and later · up to 15.006.30457 inclusive
• adobe acrobat dc15.008.20082 and later · up to 19.008.20081 inclusive
• adobe acrobat dc17.011.30059 and later · up to 17.011.30106 inclusive
• adobe acrobat dc15.006.30060 and later · up to 15.006.30456 inclusive
• adobe acrobat dc15.008.20082 and later · up to 19.008.20080 inclusive
• adobe acrobat dc17.011.30059 and later · up to 17.011.30105 inclusive
• adobe acrobat reader dc15.006.30060 and later · up to 15.006.30456 inclusive
• adobe acrobat reader dc15.008.200082 and later · up to 19.008.20080 inclusive
• adobe acrobat reader dc17.011.30059 and later · up to 17.011.30105 inclusive
• adobe acrobat reader dc15.006.30060 and later · up to 15.006.30457 inclusive
• adobe acrobat reader dc15.008.20082 and later · up to 19.008.20081 inclusive
• adobe acrobat reader dc17.011.30059 and later · up to 17.011.30106 inclusive

Other highest-scoring records for the same primary product.

• CVE-2021-28550Adobe Acrobat Reader use after free vulnerability could lead to arbitrary code executionKEV
  81Now
• CVE-2023-21608Adobe Acrobat Reader DC resetForm Use-After-Free Remote Code Execution VulnerabilityKEV
  79This week
• CVE-2020-9715Adobe Acrobat and Reader versions 2020.009.20074 and earlier, 2020.001.30002, 2017.011.30171 and earlier, and 2015.006.30523 and earlier havKEV
  76This week
• CVE-2018-4990Adobe Acrobat and Reader versions 2018.011.20038 and earlier, 2017.011.30079 and earlier, and 2015.006.30417 and earlier have a Double Free KEV
  76This week
• CVE-2026-34621Acrobat Reader | Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') (CWE-1321)KEV
  65This week
• CVE-2018-4993Adobe Acrobat and Reader versions 2018.011.20038 and earlier, 2017.011.30079 and earlier, and 2015.006.30417 and earlier have an NTLM SSO ha
  56Plan

FIRST EPSS daily score; only changes of 0.01 or more are recorded (step chart).

Root cause

After a memory region is freed, another reference pointing to it is still used. By then, the same region may have been allocated for different data.

A representative example of this vulnerability class. Not the vendor's source code; it shows the faulty pattern and its fix.

1free(dev->buf);2/* ... another thread is still running ... */3process(dev->buf);

1lock(&dev->lock);2free(dev->buf);3dev->buf = NULL;4unlock(&dev->lock);

Attack context

MITRE CAPEC attack patterns and ATT&CK techniques for this weakness class (CWE). A starting point for detection rules and threat hunting.

MITRE has no CAPEC/ATT&CK mapping for this CWE.