ByteOS

Resource:

third-party-advisory

x_refsource_SECUNIA

Hyperlink: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14416

Resource:

vdb-entry

signature

x_refsource_OVAL

Hyperlink: http://security.gentoo.org/glsa/glsa-201101-08.xml

Resource:

vendor-advisory

x_refsource_GENTOO

Hyperlink: http://www.redhat.com/support/errata/RHSA-2010-0743.html

Resource:

vendor-advisory

x_refsource_REDHAT

Hyperlink: http://www.adobe.com/support/security/bulletins/apsb10-21.html

Resource:

x_refsource_CONFIRM

Hyperlink: http://www.us-cert.gov/cas/techalerts/TA10-279A.html

Resource:

third-party-advisory

x_refsource_CERT

Hyperlink: http://www.securityfocus.com/bid/43740

Resource:

vdb-entry

x_refsource_BID

Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00006.html

Resource:

vendor-advisory

x_refsource_SUSE

▼Authorized Data Publishers (ADP)

CVE Program Container

References

Hyperlink	Resource
http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00001.html	vendor-advisory x_refsource_SUSE x_transferred
http://www.vupen.com/english/advisories/2011/0191	vdb-entry x_refsource_VUPEN x_transferred
http://secunia.com/advisories/43025	third-party-advisory x_refsource_SECUNIA x_transferred
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14416	vdb-entry signature x_refsource_OVAL x_transferred
http://security.gentoo.org/glsa/glsa-201101-08.xml	vendor-advisory x_refsource_GENTOO x_transferred
http://www.redhat.com/support/errata/RHSA-2010-0743.html	vendor-advisory x_refsource_REDHAT x_transferred
http://www.adobe.com/support/security/bulletins/apsb10-21.html	x_refsource_CONFIRM x_transferred
http://www.us-cert.gov/cas/techalerts/TA10-279A.html	third-party-advisory x_refsource_CERT x_transferred
http://www.securityfocus.com/bid/43740	vdb-entry x_refsource_BID x_transferred
http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00006.html	vendor-advisory x_refsource_SUSE x_transferred

Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00001.html

Resource:

vendor-advisory

x_refsource_SUSE

x_transferred

Hyperlink: http://www.vupen.com/english/advisories/2011/0191

Resource:

vdb-entry

x_refsource_VUPEN

x_transferred

Resource:

third-party-advisory

x_refsource_SECUNIA

x_transferred

Hyperlink: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14416

Resource:

vdb-entry

signature

x_refsource_OVAL

x_transferred

Hyperlink: http://security.gentoo.org/glsa/glsa-201101-08.xml

Resource:

vendor-advisory

x_refsource_GENTOO

x_transferred

Hyperlink: http://www.redhat.com/support/errata/RHSA-2010-0743.html

Resource:

vendor-advisory

x_refsource_REDHAT

x_transferred

Hyperlink: http://www.adobe.com/support/security/bulletins/apsb10-21.html

Resource:

x_refsource_CONFIRM

x_transferred

Hyperlink: http://www.us-cert.gov/cas/techalerts/TA10-279A.html

Resource:

third-party-advisory

x_refsource_CERT

x_transferred

Hyperlink: http://www.securityfocus.com/bid/43740

Resource:

vdb-entry

x_refsource_BID

x_transferred

Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00006.html

Resource:

vendor-advisory

x_refsource_SUSE

x_transferred

▼National Vulnerability Database (NVD)

nvd.nist.gov

Source:psirt@adobe.com

Published At:06 Oct, 2010 | 17:00

Updated At:29 Apr, 2026 | 01:13

Multiple unspecified vulnerabilities in Adobe Reader and Acrobat 9.x before 9.4 on Linux allow attackers to gain privileges via unknown vectors.

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	2.0	9.3	HIGH	AV:N/AC:M/Au:N/C:C/I:C/A:C

Type: Primary

Version: 2.0

Base score: 9.3

Base severity: HIGH

Vector:

AV:N/AC:M/Au:N/C:C/I:C/A:C

CPE Matches

cpe:2.3:a:adobe:acrobat_reader:9.0:*:*:*:*:*:*:*

>>acrobat_reader>>9.0

cpe:2.3:a:adobe:acrobat_reader:9.1:*:*:*:*:*:*:*

>>acrobat_reader>>9.1

cpe:2.3:a:adobe:acrobat_reader:9.1.1:*:*:*:*:*:*:*

>>acrobat_reader>>9.1.1

cpe:2.3:a:adobe:acrobat_reader:9.1.2:*:*:*:*:*:*:*

>>acrobat_reader>>9.1.2

cpe:2.3:a:adobe:acrobat_reader:9.1.3:*:*:*:*:*:*:*

>>acrobat_reader>>9.1.3

cpe:2.3:a:adobe:acrobat_reader:9.2:*:*:*:*:*:*:*

>>acrobat_reader>>9.2

cpe:2.3:a:adobe:acrobat_reader:9.3:*:*:*:*:*:*:*

>>acrobat_reader>>9.3

cpe:2.3:a:adobe:acrobat_reader:9.3.1:*:*:*:*:*:*:*

>>acrobat_reader>>9.3.1

cpe:2.3:a:adobe:acrobat_reader:9.3.2:*:*:*:*:*:*:*

>>acrobat_reader>>9.3.2

cpe:2.3:a:adobe:acrobat_reader:9.3.3:*:*:*:*:*:*:*

>>acrobat_reader>>9.3.3

cpe:2.3:a:adobe:acrobat_reader:9.3.4:*:*:*:*:*:*:*

>>acrobat_reader>>9.3.4

cpe:2.3:a:adobe:acrobat:9.0:*:*:*:*:*:*:*

>>acrobat>>9.0

cpe:2.3:a:adobe:acrobat:9.1:*:*:*:*:*:*:*

>>acrobat>>9.1

cpe:2.3:a:adobe:acrobat:9.1.1:*:*:*:*:*:*:*

>>acrobat>>9.1.1

cpe:2.3:a:adobe:acrobat:9.1.2:*:*:*:*:*:*:*

>>acrobat>>9.1.2

cpe:2.3:a:adobe:acrobat:9.1.3:*:*:*:*:*:*:*

>>acrobat>>9.1.3

cpe:2.3:a:adobe:acrobat:9.2:*:*:*:*:*:*:*

>>acrobat>>9.2

cpe:2.3:a:adobe:acrobat:9.3:*:*:*:*:*:*:*

>>acrobat>>9.3

cpe:2.3:a:adobe:acrobat:9.3.1:*:*:*:*:*:*:*

>>acrobat>>9.3.1

cpe:2.3:a:adobe:acrobat:9.3.2:*:*:*:*:*:*:*

>>acrobat>>9.3.2

cpe:2.3:a:adobe:acrobat:9.3.3:*:*:*:*:*:*:*

>>acrobat>>9.3.3

cpe:2.3:a:adobe:acrobat:9.3.4:*:*:*:*:*:*:*

>>acrobat>>9.3.4

Weaknesses

CWE ID	Type	Source
NVD-CWE-noinfo	Primary	nvd@nist.gov

CWE ID: NVD-CWE-noinfo

Type: Primary

Source: nvd@nist.gov

Evaluator Impact

Per: http://www.adobe.com/support/security/bulletins/apsb10-21.html 'This update resolves multiple potential Linux-only privilege escalation issues (CVE-2010-2887).'

References

Hyperlink	Source	Resource
http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00001.html	psirt@adobe.com	N/A
http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00006.html	psirt@adobe.com	N/A
http://secunia.com/advisories/43025	psirt@adobe.com	N/A
http://security.gentoo.org/glsa/glsa-201101-08.xml	psirt@adobe.com	N/A
http://www.adobe.com/support/security/bulletins/apsb10-21.html	psirt@adobe.com	Patch Vendor Advisory
http://www.redhat.com/support/errata/RHSA-2010-0743.html	psirt@adobe.com	N/A
http://www.securityfocus.com/bid/43740	psirt@adobe.com	N/A
http://www.us-cert.gov/cas/techalerts/TA10-279A.html	psirt@adobe.com	US Government Resource
http://www.vupen.com/english/advisories/2011/0191	psirt@adobe.com	N/A
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14416	psirt@adobe.com	N/A
http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00001.html	af854a3a-2127-422b-91ae-364da2661108	N/A
http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00006.html	af854a3a-2127-422b-91ae-364da2661108	N/A
http://secunia.com/advisories/43025	af854a3a-2127-422b-91ae-364da2661108	N/A
http://security.gentoo.org/glsa/glsa-201101-08.xml	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.adobe.com/support/security/bulletins/apsb10-21.html	af854a3a-2127-422b-91ae-364da2661108	Patch Vendor Advisory
http://www.redhat.com/support/errata/RHSA-2010-0743.html	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.securityfocus.com/bid/43740	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.us-cert.gov/cas/techalerts/TA10-279A.html	af854a3a-2127-422b-91ae-364da2661108	US Government Resource
http://www.vupen.com/english/advisories/2011/0191	af854a3a-2127-422b-91ae-364da2661108	N/A
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14416	af854a3a-2127-422b-91ae-364da2661108	N/A

Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00001.html

Source: psirt@adobe.com

Resource: N/A

Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00006.html

Source: psirt@adobe.com

Resource: N/A

Source: psirt@adobe.com

Resource: N/A

Hyperlink: http://security.gentoo.org/glsa/glsa-201101-08.xml

Source: psirt@adobe.com

Resource: N/A

Hyperlink: http://www.adobe.com/support/security/bulletins/apsb10-21.html

Source: psirt@adobe.com

Resource:

Patch

Vendor Advisory

Hyperlink: http://www.redhat.com/support/errata/RHSA-2010-0743.html

Source: psirt@adobe.com

Resource: N/A

Hyperlink: http://www.securityfocus.com/bid/43740

Source: psirt@adobe.com

Resource: N/A

Hyperlink: http://www.us-cert.gov/cas/techalerts/TA10-279A.html

Source: psirt@adobe.com

Resource:

US Government Resource

Hyperlink: http://www.vupen.com/english/advisories/2011/0191

Source: psirt@adobe.com

Resource: N/A

Hyperlink: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14416

Source: psirt@adobe.com

Resource: N/A

Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00001.html

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00006.html

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: http://security.gentoo.org/glsa/glsa-201101-08.xml

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: http://www.adobe.com/support/security/bulletins/apsb10-21.html

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Patch

Vendor Advisory

Hyperlink: http://www.redhat.com/support/errata/RHSA-2010-0743.html

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: http://www.securityfocus.com/bid/43740

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: http://www.us-cert.gov/cas/techalerts/TA10-279A.html

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

US Government Resource

Hyperlink: http://www.vupen.com/english/advisories/2011/0191

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14416

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Similar CVEs

1343Records found

CVE-2016-4175

Matching Score-8

Matching Score-8

CVSS Score-8.8||HIGH

EPSS-50.21% / 97.87%

7 Day CHG~0.00%

Published-13 Jul, 2016 | 01:00

Updated-06 May, 2026 | 22:30

Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4172, CVE-2016-4179, CVE-2016-4180, CVE-2016-4181, CVE-2016-4182, CVE-2016-4183, CVE-2016-4184, CVE-2016-4185, CVE-2016-4186, CVE-2016-4187, CVE-2016-4188, CVE-2016-4189, CVE-2016-4190, CVE-2016-4217, CVE-2016-4218, CVE-2016-4219, CVE-2016-4220, CVE-2016-4221, CVE-2016-4233, CVE-2016-4234, CVE-2016-4235, CVE-2016-4236, CVE-2016-4237, CVE-2016-4238, CVE-2016-4239, CVE-2016-4240, CVE-2016-4241, CVE-2016-4242, CVE-2016-4243, CVE-2016-4244, CVE-2016-4245, and CVE-2016-4246.

Vendor-n/a Apple Inc.Google LLC Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-windows_10 mac_os_x windows_8.1 windows flash_player linux_kernel flash_player_desktop_runtime chrome_os n/a

CWE ID-CWE-787

Out-of-bounds Write

CVE-2016-4190

Matching Score-8

Matching Score-8

CVSS Score-8.8||HIGH

EPSS-4.12% / 88.76%

7 Day CHG~0.00%

Published-13 Jul, 2016 | 01:00

Updated-06 May, 2026 | 22:30

Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4172, CVE-2016-4175, CVE-2016-4179, CVE-2016-4180, CVE-2016-4181, CVE-2016-4182, CVE-2016-4183, CVE-2016-4184, CVE-2016-4185, CVE-2016-4186, CVE-2016-4187, CVE-2016-4188, CVE-2016-4189, CVE-2016-4217, CVE-2016-4218, CVE-2016-4219, CVE-2016-4220, CVE-2016-4221, CVE-2016-4233, CVE-2016-4234, CVE-2016-4235, CVE-2016-4236, CVE-2016-4237, CVE-2016-4238, CVE-2016-4239, CVE-2016-4240, CVE-2016-4241, CVE-2016-4242, CVE-2016-4243, CVE-2016-4244, CVE-2016-4245, and CVE-2016-4246.

Vendor-n/a Apple Inc.Google LLC Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-windows_10 mac_os_x windows_8.1 windows flash_player linux_kernel flash_player_desktop_runtime chrome_os n/a

CWE ID-CWE-787

Out-of-bounds Write

CVE-2016-4279

Matching Score-8

Matching Score-8

CVSS Score-8.8||HIGH

EPSS-2.87% / 86.46%

7 Day CHG~0.00%

Published-14 Sep, 2016 | 18:00

Updated-06 May, 2026 | 22:30

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.375 and 19.x through 23.x before 23.0.0.162 on Windows and OS X and before 11.2.202.635 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2016-4272, CVE-2016-6921, CVE-2016-6923, CVE-2016-6925, CVE-2016-6926, CVE-2016-6927, CVE-2016-6929, CVE-2016-6930, CVE-2016-6931, and CVE-2016-6932.

Vendor-n/a Apple Inc.Google LLC Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-windows_10 mac_os_x windows_8.1 windows flash_player linux_kernel flash_player_desktop_runtime chrome_os n/a

CWE ID-CWE-416

Use After Free

CVE-2016-4246

Matching Score-8

Matching Score-8

CVSS Score-8.8||HIGH

EPSS-3.90% / 88.42%

7 Day CHG~0.00%

Published-13 Jul, 2016 | 01:00

Updated-06 May, 2026 | 22:30

Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4172, CVE-2016-4175, CVE-2016-4179, CVE-2016-4180, CVE-2016-4181, CVE-2016-4182, CVE-2016-4183, CVE-2016-4184, CVE-2016-4185, CVE-2016-4186, CVE-2016-4187, CVE-2016-4188, CVE-2016-4189, CVE-2016-4190, CVE-2016-4217, CVE-2016-4218, CVE-2016-4219, CVE-2016-4220, CVE-2016-4221, CVE-2016-4233, CVE-2016-4234, CVE-2016-4235, CVE-2016-4236, CVE-2016-4237, CVE-2016-4238, CVE-2016-4239, CVE-2016-4240, CVE-2016-4241, CVE-2016-4242, CVE-2016-4243, CVE-2016-4244, and CVE-2016-4245.

Vendor-n/a Apple Inc.Google LLC Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-windows_10 mac_os_x windows_8.1 windows flash_player linux_kernel flash_player_desktop_runtime chrome_os n/a

CWE ID-CWE-787

Out-of-bounds Write

CVE-2016-4125

Matching Score-8

Matching Score-8

Product-windows_10 linux_enterprise_desktop mac_os_x enterprise_linux_workstation enterprise_linux_server windows_8.1 linux_enterprise_workstation_extension enterprise_linux_desktop windows flash_player linux_kernel flash_player_desktop_runtime chrome_os opensuse n/a

CVSS Score-8.8||HIGH

EPSS-2.74% / 86.16%

7 Day CHG~0.00%

Published-16 Jun, 2016 | 14:00

Updated-06 May, 2026 | 22:30

Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and Microsoft Edge, has unknown impact and attack vectors, a different vulnerability than other CVEs listed in MS16-083.

Vendor-n/a Apple Inc.openSUSE Google LLC Linux Kernel Organization, Inc SUSE Red Hat, Inc.Microsoft Corporation Adobe Inc.

CWE ID-CWE-787

Out-of-bounds Write

CVE-2016-4281

Matching Score-8

Matching Score-8

CVSS Score-8.8||HIGH

EPSS-3.31% / 87.42%

7 Day CHG~0.00%

Published-14 Sep, 2016 | 18:00

Updated-06 May, 2026 | 22:30

Adobe Flash Player before 18.0.0.375 and 19.x through 23.x before 23.0.0.162 on Windows and OS X and before 11.2.202.635 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4274, CVE-2016-4275, CVE-2016-4276, CVE-2016-4280, CVE-2016-4282, CVE-2016-4283, CVE-2016-4284, CVE-2016-4285, CVE-2016-6922, and CVE-2016-6924.

Vendor-n/a Apple Inc.Google LLC Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-windows_10 mac_os_x windows_8.1 windows flash_player linux_kernel flash_player_desktop_runtime chrome_os n/a

CWE ID-CWE-787

Out-of-bounds Write

CVE-2016-4142

Matching Score-8

Matching Score-8

Product-linux_enterprise_desktop windows_8.1 enterprise_linux_desktop macos flash_player_desktop_runtime linux_kernel linux_enterprise_workstation_extension windows_server_2012 chrome_os windows_10 enterprise_linux_workstation enterprise_linux_server windows flash_player windows_rt_8.1 opensuse n/a

CVSS Score-8.8||HIGH

EPSS-2.92% / 86.59%

7 Day CHG~0.00%

Published-16 Jun, 2016 | 14:00

Updated-06 May, 2026 | 22:30

Vendor-n/a Apple Inc.openSUSE Google LLC Linux Kernel Organization, Inc SUSE Red Hat, Inc.Microsoft Corporation Adobe Inc.

CVE-2016-4133

Matching Score-8

Matching Score-8

CVSS Score-8.8||HIGH

EPSS-2.92% / 86.59%

7 Day CHG~0.00%

Published-16 Jun, 2016 | 14:00

Updated-06 May, 2026 | 22:30

Vendor-n/a Apple Inc.openSUSE Google LLC Linux Kernel Organization, Inc SUSE Red Hat, Inc.Microsoft Corporation Adobe Inc.

CVE-2016-4149

Matching Score-8

Matching Score-8

Product-windows_10 linux_enterprise_desktop mac_os_x windows_8.1 enterprise_linux_server enterprise_linux_workstation linux_enterprise_workstation_extension enterprise_linux_desktop windows flash_player linux_kernel flash_player_desktop_runtime chrome_os opensuse n/a

CVSS Score-8.8||HIGH

EPSS-2.92% / 86.59%

7 Day CHG~0.00%

Published-16 Jun, 2016 | 14:00

Updated-06 May, 2026 | 22:30

Vendor-n/a Apple Inc.openSUSE Google LLC Linux Kernel Organization, Inc SUSE Red Hat, Inc.Microsoft Corporation Adobe Inc.

CWE ID-CWE-843

Access of Resource Using Incompatible Type ('Type Confusion')

CVE-2016-4218

Matching Score-8

Matching Score-8

CVSS Score-8.8||HIGH

EPSS-3.90% / 88.42%

7 Day CHG~0.00%

Published-13 Jul, 2016 | 01:00

Updated-06 May, 2026 | 22:30

Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4172, CVE-2016-4175, CVE-2016-4179, CVE-2016-4180, CVE-2016-4181, CVE-2016-4182, CVE-2016-4183, CVE-2016-4184, CVE-2016-4185, CVE-2016-4186, CVE-2016-4187, CVE-2016-4188, CVE-2016-4189, CVE-2016-4190, CVE-2016-4217, CVE-2016-4219, CVE-2016-4220, CVE-2016-4221, CVE-2016-4233, CVE-2016-4234, CVE-2016-4235, CVE-2016-4236, CVE-2016-4237, CVE-2016-4238, CVE-2016-4239, CVE-2016-4240, CVE-2016-4241, CVE-2016-4242, CVE-2016-4243, CVE-2016-4244, CVE-2016-4245, and CVE-2016-4246.

Vendor-n/a Apple Inc.Google LLC Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-windows_10 mac_os_x windows_8.1 windows flash_player linux_kernel flash_player_desktop_runtime chrome_os n/a

CWE ID-CWE-787

Out-of-bounds Write

CVE-2016-4184

Matching Score-8

Matching Score-8

CVSS Score-8.8||HIGH

EPSS-4.12% / 88.76%

7 Day CHG~0.00%

Published-13 Jul, 2016 | 01:00

Updated-06 May, 2026 | 22:30

Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4172, CVE-2016-4175, CVE-2016-4179, CVE-2016-4180, CVE-2016-4181, CVE-2016-4182, CVE-2016-4183, CVE-2016-4185, CVE-2016-4186, CVE-2016-4187, CVE-2016-4188, CVE-2016-4189, CVE-2016-4190, CVE-2016-4217, CVE-2016-4218, CVE-2016-4219, CVE-2016-4220, CVE-2016-4221, CVE-2016-4233, CVE-2016-4234, CVE-2016-4235, CVE-2016-4236, CVE-2016-4237, CVE-2016-4238, CVE-2016-4239, CVE-2016-4240, CVE-2016-4241, CVE-2016-4242, CVE-2016-4243, CVE-2016-4244, CVE-2016-4245, and CVE-2016-4246.

Vendor-n/a Apple Inc.Google LLC Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-windows_10 mac_os_x windows_8.1 windows flash_player linux_kernel flash_player_desktop_runtime chrome_os n/a

CWE ID-CWE-787

Out-of-bounds Write

CVE-2016-4155

Matching Score-8

Matching Score-8

CVSS Score-8.8||HIGH

EPSS-4.25% / 88.92%

7 Day CHG~0.00%

Published-16 Jun, 2016 | 14:00

Updated-06 May, 2026 | 22:30

Vendor-n/a Apple Inc.openSUSE Google LLC Linux Kernel Organization, Inc SUSE Red Hat, Inc.Microsoft Corporation Adobe Inc.

CWE ID-CWE-787

Out-of-bounds Write

CVE-2016-4128

Matching Score-8

Matching Score-8

CVSS Score-8.8||HIGH

EPSS-2.74% / 86.16%

7 Day CHG~0.00%

Published-16 Jun, 2016 | 14:00

Updated-06 May, 2026 | 22:30

Vendor-n/a Apple Inc.openSUSE Google LLC Linux Kernel Organization, Inc SUSE Red Hat, Inc.Microsoft Corporation Adobe Inc.

CWE ID-CWE-787

Out-of-bounds Write

CVE-2016-4135

Matching Score-8

Matching Score-8

CVSS Score-8.8||HIGH

EPSS-30.32% / 96.76%

7 Day CHG~0.00%

Published-16 Jun, 2016 | 14:00

Updated-06 May, 2026 | 22:30

Vendor-n/a Apple Inc.openSUSE Google LLC Linux Kernel Organization, Inc SUSE Red Hat, Inc.Microsoft Corporation Adobe Inc.

CVE-2016-4286

Matching Score-8

Matching Score-8

Product-windows_10 windows_8.1 mac_os_x enterprise_linux_server enterprise_linux_workstation enterprise_linux_desktop windows flash_player linux_kernel flash_player_desktop_runtime chrome_os n/a

CVSS Score-8.8||HIGH

EPSS-2.42% / 85.30%

7 Day CHG~0.00%

Published-13 Oct, 2016 | 19:00

Updated-06 May, 2026 | 22:30

Adobe Flash Player before 18.0.0.382 and 19.x through 23.x before 23.0.0.185 on Windows and OS X and before 11.2.202.637 on Linux allows attackers to bypass intended access restrictions via unspecified vectors.

Vendor-n/a Apple Inc.Google LLC Linux Kernel Organization, Inc Red Hat, Inc.Microsoft Corporation Adobe Inc.

CWE ID-CWE-284

Improper Access Control

CVE-2016-4166

Matching Score-8

Matching Score-8

CVSS Score-8.8||HIGH

EPSS-3.67% / 88.05%

7 Day CHG~0.00%

Published-16 Jun, 2016 | 14:00

Updated-06 May, 2026 | 22:30

Vendor-n/a Apple Inc.Google LLC Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-windows_10 mac_os_x windows_8.1 windows flash_player linux_kernel flash_player_desktop_runtime chrome_os n/a

CWE ID-CWE-787

Out-of-bounds Write

CVE-2016-4130

Matching Score-8

Matching Score-8

CVSS Score-8.8||HIGH

EPSS-2.74% / 86.16%

7 Day CHG~0.00%

Published-16 Jun, 2016 | 14:00

Updated-06 May, 2026 | 22:30

Vendor-n/a Apple Inc.openSUSE Google LLC Linux Kernel Organization, Inc SUSE Red Hat, Inc.Microsoft Corporation Adobe Inc.

CWE ID-CWE-787

Out-of-bounds Write

CVE-2016-4129

Matching Score-8

Matching Score-8

CVSS Score-8.8||HIGH

EPSS-2.74% / 86.16%

7 Day CHG~0.00%

Published-16 Jun, 2016 | 14:00

Updated-06 May, 2026 | 22:30

Vendor-n/a Apple Inc.openSUSE Google LLC Linux Kernel Organization, Inc SUSE Red Hat, Inc.Microsoft Corporation Adobe Inc.

CWE ID-CWE-787

Out-of-bounds Write

CVE-2016-4185

Matching Score-8

Matching Score-8

CVSS Score-8.8||HIGH

EPSS-6.89% / 91.49%

7 Day CHG~0.00%

Published-13 Jul, 2016 | 01:00

Updated-06 May, 2026 | 22:30

Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4172, CVE-2016-4175, CVE-2016-4179, CVE-2016-4180, CVE-2016-4181, CVE-2016-4182, CVE-2016-4183, CVE-2016-4184, CVE-2016-4186, CVE-2016-4187, CVE-2016-4188, CVE-2016-4189, CVE-2016-4190, CVE-2016-4217, CVE-2016-4218, CVE-2016-4219, CVE-2016-4220, CVE-2016-4221, CVE-2016-4233, CVE-2016-4234, CVE-2016-4235, CVE-2016-4236, CVE-2016-4237, CVE-2016-4238, CVE-2016-4239, CVE-2016-4240, CVE-2016-4241, CVE-2016-4242, CVE-2016-4243, CVE-2016-4244, CVE-2016-4245, and CVE-2016-4246.

Vendor-n/a Apple Inc.Google LLC Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-windows_10 mac_os_x windows_8.1 windows flash_player linux_kernel flash_player_desktop_runtime chrome_os n/a

CWE ID-CWE-787

Out-of-bounds Write

CVE-2016-4180

Matching Score-8

Matching Score-8

CVSS Score-8.8||HIGH

EPSS-4.12% / 88.76%

7 Day CHG~0.00%

Published-13 Jul, 2016 | 01:00

Updated-06 May, 2026 | 22:30

Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4172, CVE-2016-4175, CVE-2016-4179, CVE-2016-4181, CVE-2016-4182, CVE-2016-4183, CVE-2016-4184, CVE-2016-4185, CVE-2016-4186, CVE-2016-4187, CVE-2016-4188, CVE-2016-4189, CVE-2016-4190, CVE-2016-4217, CVE-2016-4218, CVE-2016-4219, CVE-2016-4220, CVE-2016-4221, CVE-2016-4233, CVE-2016-4234, CVE-2016-4235, CVE-2016-4236, CVE-2016-4237, CVE-2016-4238, CVE-2016-4239, CVE-2016-4240, CVE-2016-4241, CVE-2016-4242, CVE-2016-4243, CVE-2016-4244, CVE-2016-4245, and CVE-2016-4246.

Vendor-n/a Apple Inc.Google LLC Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-windows_10 mac_os_x windows_8.1 windows flash_player linux_kernel flash_player_desktop_runtime chrome_os n/a

CWE ID-CWE-787

Out-of-bounds Write

CVE-2016-4173

Matching Score-8

Matching Score-8

CVSS Score-8.8||HIGH

EPSS-7.71% / 92.02%

7 Day CHG~0.00%

Published-13 Jul, 2016 | 01:00

Updated-06 May, 2026 | 22:30

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2016-4174, CVE-2016-4222, CVE-2016-4226, CVE-2016-4227, CVE-2016-4228, CVE-2016-4229, CVE-2016-4230, CVE-2016-4231, and CVE-2016-4248.

Vendor-n/a Apple Inc.Google LLC Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-windows_10 mac_os_x windows_8.1 windows flash_player linux_kernel flash_player_desktop_runtime chrome_os n/a

CWE ID-CWE-416

Use After Free

CVE-2016-4123

Matching Score-8

Matching Score-8

CVSS Score-8.8||HIGH

EPSS-2.74% / 86.16%

7 Day CHG~0.00%

Published-16 Jun, 2016 | 14:00

Updated-06 May, 2026 | 22:30

Vendor-n/a Apple Inc.openSUSE Google LLC Linux Kernel Organization, Inc SUSE Red Hat, Inc.Microsoft Corporation Adobe Inc.

CWE ID-CWE-787

Out-of-bounds Write

CVE-2016-4186

Matching Score-8

Matching Score-8

CVSS Score-8.8||HIGH

EPSS-4.12% / 88.76%

7 Day CHG~0.00%

Published-13 Jul, 2016 | 01:00

Updated-06 May, 2026 | 22:30

Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4172, CVE-2016-4175, CVE-2016-4179, CVE-2016-4180, CVE-2016-4181, CVE-2016-4182, CVE-2016-4183, CVE-2016-4184, CVE-2016-4185, CVE-2016-4187, CVE-2016-4188, CVE-2016-4189, CVE-2016-4190, CVE-2016-4217, CVE-2016-4218, CVE-2016-4219, CVE-2016-4220, CVE-2016-4221, CVE-2016-4233, CVE-2016-4234, CVE-2016-4235, CVE-2016-4236, CVE-2016-4237, CVE-2016-4238, CVE-2016-4239, CVE-2016-4240, CVE-2016-4241, CVE-2016-4242, CVE-2016-4243, CVE-2016-4244, CVE-2016-4245, and CVE-2016-4246.

Vendor-n/a Apple Inc.Google LLC Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-windows_10 mac_os_x windows_8.1 windows flash_player linux_kernel flash_player_desktop_runtime chrome_os n/a

CWE ID-CWE-787

Out-of-bounds Write

CVE-2016-4221

Matching Score-8

Matching Score-8

CVSS Score-8.8||HIGH

EPSS-3.90% / 88.42%

7 Day CHG~0.00%

Published-13 Jul, 2016 | 01:00

Updated-06 May, 2026 | 22:30

Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4172, CVE-2016-4175, CVE-2016-4179, CVE-2016-4180, CVE-2016-4181, CVE-2016-4182, CVE-2016-4183, CVE-2016-4184, CVE-2016-4185, CVE-2016-4186, CVE-2016-4187, CVE-2016-4188, CVE-2016-4189, CVE-2016-4190, CVE-2016-4217, CVE-2016-4218, CVE-2016-4219, CVE-2016-4220, CVE-2016-4233, CVE-2016-4234, CVE-2016-4235, CVE-2016-4236, CVE-2016-4237, CVE-2016-4238, CVE-2016-4239, CVE-2016-4240, CVE-2016-4241, CVE-2016-4242, CVE-2016-4243, CVE-2016-4244, CVE-2016-4245, and CVE-2016-4246.

Vendor-n/a Apple Inc.Google LLC Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-windows_10 mac_os_x windows_8.1 windows flash_player linux_kernel flash_player_desktop_runtime chrome_os n/a

CWE ID-CWE-787

Out-of-bounds Write

CVE-2016-4240

Matching Score-8

Matching Score-8

CVSS Score-8.8||HIGH

EPSS-3.90% / 88.42%

7 Day CHG~0.00%

Published-13 Jul, 2016 | 01:00

Updated-06 May, 2026 | 22:30

Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4172, CVE-2016-4175, CVE-2016-4179, CVE-2016-4180, CVE-2016-4181, CVE-2016-4182, CVE-2016-4183, CVE-2016-4184, CVE-2016-4185, CVE-2016-4186, CVE-2016-4187, CVE-2016-4188, CVE-2016-4189, CVE-2016-4190, CVE-2016-4217, CVE-2016-4218, CVE-2016-4219, CVE-2016-4220, CVE-2016-4221, CVE-2016-4233, CVE-2016-4234, CVE-2016-4235, CVE-2016-4236, CVE-2016-4237, CVE-2016-4238, CVE-2016-4239, CVE-2016-4241, CVE-2016-4242, CVE-2016-4243, CVE-2016-4244, CVE-2016-4245, and CVE-2016-4246.

Vendor-n/a Apple Inc.Google LLC Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-windows_10 mac_os_x windows_8.1 windows flash_player linux_kernel flash_player_desktop_runtime chrome_os n/a

CWE ID-CWE-787

Out-of-bounds Write

CVE-2008-5364

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-9.3||HIGH

EPSS-3.18% / 87.12%

7 Day CHG~0.00%

Published-08 Dec, 2008 | 11:00

Updated-23 Apr, 2026 | 00:35

Stack-based buffer overflow in the getPlus ActiveX control in gp.ocx 1.2.2.50 in NOS Microsystems getPlus Download Manager, as used for the Adobe Reader 8.1 installation process and other downloads, allows remote attackers to execute arbitrary code via unspecified vectors, a different issue than CVE-2008-4817.

Vendor-n/a getPlus (NOS Microsystems Ltd.)Adobe Inc.

Product-acrobat_reader getplus_download_manager n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2016-4239

Matching Score-8

Matching Score-8

CVSS Score-8.8||HIGH

EPSS-3.90% / 88.42%

7 Day CHG~0.00%

Published-13 Jul, 2016 | 01:00

Updated-06 May, 2026 | 22:30

Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4172, CVE-2016-4175, CVE-2016-4179, CVE-2016-4180, CVE-2016-4181, CVE-2016-4182, CVE-2016-4183, CVE-2016-4184, CVE-2016-4185, CVE-2016-4186, CVE-2016-4187, CVE-2016-4188, CVE-2016-4189, CVE-2016-4190, CVE-2016-4217, CVE-2016-4218, CVE-2016-4219, CVE-2016-4220, CVE-2016-4221, CVE-2016-4233, CVE-2016-4234, CVE-2016-4235, CVE-2016-4236, CVE-2016-4237, CVE-2016-4238, CVE-2016-4240, CVE-2016-4241, CVE-2016-4242, CVE-2016-4243, CVE-2016-4244, CVE-2016-4245, and CVE-2016-4246.

Vendor-n/a Apple Inc.Google LLC Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-windows_10 mac_os_x windows_8.1 windows flash_player linux_kernel flash_player_desktop_runtime chrome_os n/a

CWE ID-CWE-787

Out-of-bounds Write

CVE-2016-4146

Matching Score-8

Matching Score-8

Product-linux_enterprise_desktop windows_8.1 enterprise_linux_desktop macos flash_player_desktop_runtime linux_kernel linux_enterprise_workstation_extension windows_server_2012 chrome_os windows_10 enterprise_linux_server enterprise_linux_workstation windows flash_player windows_rt_8.1 opensuse n/a

CVSS Score-8.8||HIGH

EPSS-2.92% / 86.59%

7 Day CHG~0.00%

Published-16 Jun, 2016 | 14:00

Updated-06 May, 2026 | 22:30

Vendor-n/a Apple Inc.openSUSE Google LLC Linux Kernel Organization, Inc SUSE Red Hat, Inc.Microsoft Corporation Adobe Inc.

CVE-2016-4275

Matching Score-8

Matching Score-8

CVSS Score-8.8||HIGH

EPSS-56.72% / 98.16%

7 Day CHG~0.00%

Published-14 Sep, 2016 | 18:00

Updated-06 May, 2026 | 22:30

Adobe Flash Player before 18.0.0.375 and 19.x through 23.x before 23.0.0.162 on Windows and OS X and before 11.2.202.635 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4274, CVE-2016-4276, CVE-2016-4280, CVE-2016-4281, CVE-2016-4282, CVE-2016-4283, CVE-2016-4284, CVE-2016-4285, CVE-2016-6922, and CVE-2016-6924.

Vendor-n/a Apple Inc.Google LLC Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-windows_10 mac_os_x windows_8.1 windows flash_player linux_kernel flash_player_desktop_runtime chrome_os n/a

CWE ID-CWE-787

Out-of-bounds Write

CVE-2008-4814

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-9.3||HIGH

EPSS-47.98% / 97.76%

7 Day CHG~0.00%

Published-05 Nov, 2008 | 14:51

Updated-23 Apr, 2026 | 00:35

Unspecified vulnerability in a JavaScript method in Adobe Reader and Acrobat 8.1.2 and earlier, and before 7.1.1, allows remote attackers to execute arbitrary code via unknown vectors, related to an "input validation issue."

Vendor-n/a Adobe Inc.

Product-acrobat acrobat_reader n/a

CWE ID-CWE-20

Improper Input Validation

CVE-2021-44708

Matching Score-8

Matching Score-8

CVSS Score-7.8||HIGH

EPSS-2.95% / 86.64%

7 Day CHG~0.00%

Published-14 Jan, 2022 | 19:05

Updated-16 Sep, 2024 | 23:15

Adobe Acrobat Pro DC Heap Overflow could lead to Arbitrary code execution

Acrobat Reader DC version 21.007.20099 (and earlier), 20.004.30017 (and earlier) and 17.011.30204 (and earlier) are affected by a heap overflow vulnerability due to insecure handling of a crafted file, potentially resulting in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Product-acrobat_dc acrobat_reader acrobat acrobat_reader_dc windows macos Acrobat Reader

CWE ID-CWE-122

Heap-based Buffer Overflow

CWE ID-CWE-787

Out-of-bounds Write

CVE-2016-4153

Matching Score-8

Matching Score-8

CVSS Score-8.8||HIGH

EPSS-4.25% / 88.92%

7 Day CHG~0.00%

Published-16 Jun, 2016 | 14:00

Updated-06 May, 2026 | 22:30

Vendor-n/a Apple Inc.openSUSE Google LLC Linux Kernel Organization, Inc SUSE Red Hat, Inc.Microsoft Corporation Adobe Inc.

CWE ID-CWE-787

Out-of-bounds Write

CVE-2016-4139

Matching Score-8

Matching Score-8

CVSS Score-8.8||HIGH

EPSS-2.92% / 86.59%

7 Day CHG~0.00%

Published-16 Jun, 2016 | 14:00

Updated-06 May, 2026 | 22:30

Vendor-n/a Apple Inc.openSUSE Google LLC Linux Kernel Organization, Inc SUSE Red Hat, Inc.Microsoft Corporation Adobe Inc.

CVE-2021-45062

Matching Score-8

Matching Score-8

CVSS Score-7.8||HIGH

EPSS-6.90% / 91.49%

7 Day CHG-2.15%

Published-14 Jan, 2022 | 19:05

Updated-17 Sep, 2024 | 03:03

Adobe Acrobat Reader DC Font Parsing Use-After-Free Remote Code Execution Vulnerability

Acrobat Reader DC version 21.007.20099 (and earlier), 20.004.30017 (and earlier) and 17.011.30204 (and earlier) are affected by a use-after-free vulnerability in the processing of Format event actions that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Product-acrobat_dc acrobat_reader acrobat acrobat_reader_dc windows macos Acrobat Reader

CWE ID-CWE-416

Use After Free

CVE-2021-44711

Matching Score-8

Matching Score-8

CVSS Score-7.8||HIGH

EPSS-6.41% / 91.15%

7 Day CHG~0.00%

Published-14 Jan, 2022 | 19:05

Updated-16 Sep, 2024 | 16:17

Adobe Acrobat Reader DC annotation gestures integer overflow vulnerability

Acrobat Reader DC version 21.007.20099 (and earlier), 20.004.30017 (and earlier) and 17.011.30204 (and earlier) are affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Product-acrobat_dc acrobat_reader acrobat acrobat_reader_dc windows macos Acrobat Reader

CWE ID-CWE-190

Integer Overflow or Wraparound

CVE-2008-4812

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-9.3||HIGH

EPSS-42.78% / 97.53%

7 Day CHG~0.00%

Published-05 Nov, 2008 | 14:51

Updated-23 Apr, 2026 | 00:35

Array index error in Adobe Reader and Acrobat, and the Explorer extension (aka AcroRd32Info), 8.1.2, 8.1.1, and earlier allows remote attackers to execute arbitrary code via a crafted PDF document that triggers an out-of-bounds write, related to parsing of Type 1 fonts.

Vendor-n/a Adobe Inc.

Product-acrobat acrobat_reader n/a

CWE ID-CWE-20

Improper Input Validation

CVE-2008-4817

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-9.3||HIGH

EPSS-31.79% / 96.87%

7 Day CHG~0.00%

Published-05 Nov, 2008 | 14:51

Updated-23 Apr, 2026 | 00:35

The Download Manager in Adobe Acrobat Professional and Reader 8.1.2 and earlier allows remote attackers to execute arbitrary code via a crafted PDF document that calls an AcroJS function with a long string argument, triggering heap corruption.

Vendor-n/a Adobe Inc.

Product-acrobat acrobat_reader download_manager n/a

CWE ID-CWE-20

Improper Input Validation

CVE-2016-4188

Matching Score-8

Matching Score-8

CVSS Score-8.8||HIGH

EPSS-8.83% / 92.64%

7 Day CHG~0.00%

Published-13 Jul, 2016 | 01:00

Updated-06 May, 2026 | 22:30

Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4172, CVE-2016-4175, CVE-2016-4179, CVE-2016-4180, CVE-2016-4181, CVE-2016-4182, CVE-2016-4183, CVE-2016-4184, CVE-2016-4185, CVE-2016-4186, CVE-2016-4187, CVE-2016-4189, CVE-2016-4190, CVE-2016-4217, CVE-2016-4218, CVE-2016-4219, CVE-2016-4220, CVE-2016-4221, CVE-2016-4233, CVE-2016-4234, CVE-2016-4235, CVE-2016-4236, CVE-2016-4237, CVE-2016-4238, CVE-2016-4239, CVE-2016-4240, CVE-2016-4241, CVE-2016-4242, CVE-2016-4243, CVE-2016-4244, CVE-2016-4245, and CVE-2016-4246.

Vendor-n/a Apple Inc.Google LLC Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-windows_10 mac_os_x windows_8.1 windows flash_player linux_kernel flash_player_desktop_runtime chrome_os n/a

CWE ID-CWE-787

Out-of-bounds Write

CVE-2021-44707

Matching Score-8

Matching Score-8

CVSS Score-7.8||HIGH

EPSS-0.56% / 68.27%

7 Day CHG~0.00%

Published-14 Jan, 2022 | 19:05

Updated-16 Sep, 2024 | 18:29

Adobe Acrobat Reader DC OTF Font Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

Acrobat Reader DC version 21.007.20099 (and earlier), 20.004.30017 (and earlier) and 17.011.30204 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Product-acrobat_dc acrobat_reader acrobat acrobat_reader_dc windows macos Acrobat Reader

CWE ID-CWE-787

Out-of-bounds Write

CVE-2008-4813

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-9.3||HIGH

EPSS-29.91% / 96.72%

7 Day CHG~0.00%

Published-05 Nov, 2008 | 14:51

Updated-23 Apr, 2026 | 00:35

Adobe Reader and Acrobat 8.1.2 and earlier, and before 7.1.1, allow remote attackers to execute arbitrary code via a crafted PDF document that (1) performs unspecified actions on a Collab object that trigger memory corruption, related to a GetCosObj method; or (2) contains a malformed PDF object that triggers memory corruption during parsing.

Vendor-n/a Adobe Inc.

Product-acrobat acrobat_reader n/a

CVE-2021-44743

Matching Score-8

Matching Score-8

CVSS Score-7.8||HIGH

EPSS-1.51% / 81.40%

7 Day CHG~0.00%

Published-14 Jan, 2022 | 19:04

Updated-23 Apr, 2025 | 19:11

Adobe Bridge JPEG2000 Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

Adobe Bridge version 11.1.2 (and earlier) and version 12.0 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Vendor-Adobe Inc.Apple Inc.Microsoft Corporation

Product-windows bridge macos Bridge

CWE ID-CWE-787

Out-of-bounds Write

CVE-2021-44704

Matching Score-8

Matching Score-8

CVSS Score-7.8||HIGH

EPSS-5.93% / 90.73%

7 Day CHG-1.88%

Published-14 Jan, 2022 | 19:05

Updated-17 Sep, 2024 | 02:16

Adobe Acrobat Reader Use-After-Free could lead to Arbitrary code execution

Product-acrobat_dc acrobat_reader acrobat acrobat_reader_dc windows macos Acrobat Reader

CWE ID-CWE-416

Use After Free

CVE-2008-3961

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-9.3||HIGH

EPSS-4.90% / 89.71%

7 Day CHG~0.00%

Published-17 Sep, 2008 | 18:06

Updated-23 Apr, 2026 | 00:35

Multiple unspecified vulnerabilities in Adobe Illustrator CS2 on Macintosh allow user-assisted attackers to execute arbitrary code via a crafted AI file.

Vendor-n/a Adobe Inc.

Product-illustrator n/a

CVE-2021-44710

Matching Score-8

Matching Score-8

CVSS Score-7.8||HIGH

EPSS-2.98% / 86.71%

7 Day CHG~0.00%

Published-14 Jan, 2022 | 19:05

Updated-16 Sep, 2024 | 17:54

Adobe Acrobat Reader Use-after-free could lead to Arbitrary code execution

Product-acrobat_dc acrobat_reader acrobat acrobat_reader_dc windows macos Acrobat Reader

CWE ID-CWE-416

Use After Free

CVE-2008-3872

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-9.3||HIGH

EPSS-2.15% / 84.45%

7 Day CHG~0.00%

Published-06 Oct, 2008 | 17:00

Updated-23 Apr, 2026 | 00:35

Adobe Flash Player 8.0.39.0 and earlier, and 9.x up to 9.0.115.0, allows remote attackers to bypass the allowScriptAccess parameter setting via a crafted SWF file with unspecified "Filter evasion" manipulations.

Vendor-n/a Adobe Inc.

Product-flash_player n/a

CVE-2021-44181

Matching Score-8

Matching Score-8

CVSS Score-7.8||HIGH

EPSS-1.72% / 82.62%

7 Day CHG~0.00%

Published-20 Dec, 2021 | 20:08

Updated-23 Apr, 2025 | 19:16

Adobe Dimension GIF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

Adobe Dimension versions 3.4.3 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious GIF file.

Vendor-Adobe Inc.Apple Inc.Microsoft Corporation

Product-windows dimension macos Dimension

CWE ID-CWE-787

Out-of-bounds Write

CVE-2018-15955

Matching Score-8

Matching Score-8

CVSS Score-7.8||HIGH

EPSS-6.31% / 91.07%

7 Day CHG+1.36%

Published-12 Oct, 2018 | 18:00

Updated-05 Aug, 2024 | 10:10

Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have an out-of-bounds write vulnerability. Successful exploitation could lead to arbitrary code execution.

Product-mac_os_x acrobat_dc windows acrobat_reader_dc Adobe Acrobat and Reader

CWE ID-CWE-787

Out-of-bounds Write

CVE-2021-44179

Matching Score-8

Matching Score-8

CVSS Score-7.8||HIGH

EPSS-1.65% / 82.25%

7 Day CHG~0.00%

Published-20 Dec, 2021 | 20:08

Updated-23 Apr, 2025 | 19:16

Adobe Dimension GIF File Parsing Memory Corruption Remote Code Execution Vulnerability

Adobe Dimension versions 3.4.3 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious GIF file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this vulnerability.

Vendor-Adobe Inc.Apple Inc.Microsoft Corporation

Product-windows dimension macos Dimension

CWE ID-CWE-788

Access of Memory Location After End of Buffer

CWE ID-CWE-787

Out-of-bounds Write

CVE-2018-15999

Matching Score-8

Matching Score-8

CVSS Score-7.8||HIGH

EPSS-3.35% / 87.49%

7 Day CHG~0.00%

Published-18 Jan, 2019 | 17:00

Updated-05 Aug, 2024 | 10:10

Adobe Acrobat and Reader versions 2019.008.20081 and earlier, 2019.008.20080 and earlier, 2019.008.20081 and earlier, 2017.011.30106 and earlier version, 2017.011.30105 and earlier version, 2015.006.30457 and earlier, and 2015.006.30456 and earlier have an out-of-bounds write vulnerability. Successful exploitation could lead to arbitrary code execution.

Vendor-n/a Apple Inc.Microsoft Corporation Adobe Inc.

Product-mac_os_x acrobat_dc windows acrobat_reader_dc n/a

CWE ID-CWE-787

Out-of-bounds Write

CVE-2021-44709

Matching Score-8

Matching Score-8

CVSS Score-7.8||HIGH

EPSS-2.95% / 86.64%

7 Day CHG~0.00%

Published-14 Jan, 2022 | 19:05

Updated-16 Sep, 2024 | 20:47

Adobe Acrobat Pro DC Heap Overflow Vulnerability could lead to Arbitrary code execution