CVE records

Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program, by email as they are published. Where the data comes from: sources.

Updated under an hour ago ()

What this means for you

This week: 3,220 CVEs published, 240 critical, and 3 newly confirmed exploited. Add your stack to see whether any of them hit you.

Published in the last 7 days
3,220
Show in the list
Critical, last 7 days
240
Show in the list
Healthcare-tagged, last 7 days
9
Show in the list
Known exploited (CISA KEV)
1,760
Show in the list

Showing CVEs that name the product adobe:acrobat_dc. Show all products

73 CVEs
Showing 1 to 10.
CVESeverityTitlePublished
CVE-2018-4990
Known exploited
High 8.8Adobe Acrobat and Reader versions 2018.011.20038 and earlier, 2017.011.30079 and earlier, and 2015.006.30417 and earlier have a Double Free vulnerability.
Assigned by adobe
Jul 9, 2018
CVE-2020-9715
Known exploited
High 7.8Adobe Acrobat and Reader versions 2020.009.20074 and earlier, 2020.001.30002, 2017.011.30171 and earlier, and 2015.006.30523 and earlier have an use-after-free vulnerability.
Assigned by adobe
Aug 18, 2020
CVE-2021-21017
Known exploited
High 8.8Acrobat Reader DC Heap-based Buffer Overflow Vulnerability Could Lead To Arbitrary Code Execution
Assigned by adobe
Feb 11, 2021
CVE-2021-28550
Known exploited
Critical 9.6Adobe Acrobat Reader use after free vulnerability could lead to arbitrary code execution
Assigned by adobe
Sep 2, 2021
CVE-2023-21608
Known exploited
High 7.8Adobe Acrobat Reader DC resetForm Use-After-Free Remote Code Execution Vulnerability
Assigned by adobe
Jan 17, 2023
CVE-2023-26369
Known exploited
High 7.8[Google Project Zero] Adobe Acrobat DC OOBW 0-day actively exploited in the wild
Assigned by adobe
Sep 13, 2023
CVE-2025-64787Low 3.3Acrobat Reader | Improper Verification of Cryptographic Signature (CWE-347)
Assigned by adobe
Dec 9, 2025
CVE-2025-64786Low 3.3Acrobat Reader | Improper Verification of Cryptographic Signature (CWE-347)
Assigned by adobe
Dec 9, 2025
CVE-2025-64785High 7.8Acrobat Reader | Untrusted Search Path (CWE-426)
Assigned by adobe
Dec 9, 2025
CVE-2025-64899High 7.8Acrobat Reader | Out-of-bounds Read (CWE-125)
Assigned by adobe
Dec 9, 2025

CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.

Your cookie choices
We use essential cookies to run this site, and, only with your consent, an advertising cookie from Google to measure whether our ads lead to sign-ups and subscriptions. See our for details.