ByteOS

cpe:2.3:a:adobe:acrobat:9.0:*:*:*:*:*:*:*

>>acrobat>>9.0

cpe:2.3:a:adobe:acrobat:9.0:-:pro:*:*:*:*:*

>>acrobat>>9.0

cpe:2.3:a:adobe:acrobat:9.1:*:*:*:*:*:*:*

>>acrobat>>9.1

cpe:2.3:a:adobe:acrobat:9.1:-:pro:*:*:*:*:*

>>acrobat>>9.1

cpe:2.3:a:adobe:acrobat:9.1.1:*:*:*:*:*:*:*

>>acrobat>>9.1.1

cpe:2.3:a:adobe:acrobat:9.1.1:-:*:*:*:*:*:*

>>acrobat>>9.1.1

cpe:2.3:a:adobe:acrobat:9.1.2:*:*:*:*:*:*:*

>>acrobat>>9.1.2

cpe:2.3:a:adobe:acrobat:9.1.3:*:*:*:*:*:*:*

>>acrobat>>9.1.3

cpe:2.3:a:adobe:acrobat:9.1.3:-:*:*:*:*:*:*

>>acrobat>>9.1.3

cpe:2.3:a:adobe:acrobat:9.2:*:*:*:*:*:*:*

>>acrobat>>9.2

cpe:2.3:a:adobe:acrobat:9.2:-:*:*:*:*:*:*

>>acrobat>>9.2

cpe:2.3:a:adobe:acrobat:9.3:*:*:*:*:*:*:*

>>acrobat>>9.3

cpe:2.3:a:adobe:acrobat:9.3:-:pro:*:*:*:*:*

>>acrobat>>9.3

cpe:2.3:a:adobe:acrobat:9.3.1:*:*:*:*:*:*:*

>>acrobat>>9.3.1

cpe:2.3:a:adobe:acrobat:9.3.1:-:*:*:*:*:*:*

>>acrobat>>9.3.1

cpe:2.3:a:adobe:acrobat:9.3.2:*:*:*:*:*:*:*

>>acrobat>>9.3.2

cpe:2.3:a:adobe:acrobat:9.3.2:-:*:*:*:*:*:*

>>acrobat>>9.3.2

cpe:2.3:a:adobe:acrobat:9.3.3:*:*:*:*:*:*:*

>>acrobat>>9.3.3

cpe:2.3:a:adobe:acrobat:9.3.4:*:*:*:*:*:*:*

>>acrobat>>9.3.4

cpe:2.3:a:adobe:acrobat:9.3.4:-:*:*:*:*:*:*

>>acrobat>>9.3.4

cpe:2.3:a:adobe:acrobat:9.4:*:*:*:*:*:*:*

>>acrobat>>9.4

cpe:2.3:a:adobe:acrobat:9.4.1:*:*:*:*:*:*:*

>>acrobat>>9.4.1

cpe:2.3:a:adobe:acrobat:9.4.1:-:*:*:*:*:*:*

>>acrobat>>9.4.1

cpe:2.3:a:adobe:acrobat:9.4.2:*:*:*:*:*:*:*

>>acrobat>>9.4.2

cpe:2.3:a:adobe:acrobat:9.4.2:-:*:*:*:*:*:*

>>acrobat>>9.4.2

cpe:2.3:a:adobe:acrobat:9.4.3:*:*:*:*:*:*:*

>>acrobat>>9.4.3

cpe:2.3:a:adobe:acrobat:9.4.3:-:*:*:*:*:*:*

>>acrobat>>9.4.3

cpe:2.3:a:adobe:acrobat:9.4.4:*:*:*:*:*:*:*

>>acrobat>>9.4.4

cpe:2.3:a:adobe:acrobat:9.4.4:-:*:*:*:*:*:*

>>acrobat>>9.4.4

cpe:2.3:a:adobe:acrobat:9.4.5:*:*:*:*:*:*:*

>>acrobat>>9.4.5

cpe:2.3:a:adobe:acrobat:9.4.5:-:*:*:*:*:*:*

>>acrobat>>9.4.5

cpe:2.3:a:adobe:acrobat:9.4.6:*:*:*:*:*:*:*

>>acrobat>>9.4.6

cpe:2.3:a:adobe:acrobat:9.4.6:-:*:*:*:*:*:*

>>acrobat>>9.4.6

cpe:2.3:a:adobe:acrobat:9.4.7:*:*:*:*:*:*:*

>>acrobat>>9.4.7

cpe:2.3:a:adobe:acrobat:9.5:*:*:*:*:*:*:*

>>acrobat>>9.5

cpe:2.3:a:adobe:acrobat:9.5.1:*:*:*:*:*:*:*

>>acrobat>>9.5.1

cpe:2.3:a:adobe:acrobat:9.5.2:*:*:*:*:*:*:*

>>acrobat>>9.5.2

cpe:2.3:a:adobe:acrobat_reader:9.0:*:*:*:*:*:*:*

>>acrobat_reader>>9.0

cpe:2.3:a:adobe:acrobat_reader:9.1:*:*:*:*:*:*:*

>>acrobat_reader>>9.1

cpe:2.3:a:adobe:acrobat_reader:9.1.1:*:*:*:*:*:*:*

>>acrobat_reader>>9.1.1

cpe:2.3:a:adobe:acrobat_reader:9.1.2:*:*:*:*:*:*:*

>>acrobat_reader>>9.1.2

cpe:2.3:a:adobe:acrobat_reader:9.1.3:*:*:*:*:*:*:*

>>acrobat_reader>>9.1.3

cpe:2.3:a:adobe:acrobat_reader:9.2:*:*:*:*:*:*:*

>>acrobat_reader>>9.2

cpe:2.3:a:adobe:acrobat_reader:9.3:*:*:*:*:*:*:*

>>acrobat_reader>>9.3

cpe:2.3:a:adobe:acrobat_reader:9.3.1:*:*:*:*:*:*:*

>>acrobat_reader>>9.3.1

cpe:2.3:a:adobe:acrobat_reader:9.3.2:*:*:*:*:*:*:*

>>acrobat_reader>>9.3.2

cpe:2.3:a:adobe:acrobat_reader:9.3.3:*:*:*:*:*:*:*

>>acrobat_reader>>9.3.3

cpe:2.3:a:adobe:acrobat_reader:9.3.4:*:*:*:*:*:*:*

>>acrobat_reader>>9.3.4

cpe:2.3:a:adobe:acrobat_reader:9.4:*:*:*:*:*:*:*

>>acrobat_reader>>9.4

cpe:2.3:a:adobe:acrobat_reader:9.4.1:*:*:*:*:*:*:*

>>acrobat_reader>>9.4.1

Weaknesses

CWE ID	Type	Source
CWE-264	Primary	nvd@nist.gov

CWE ID: CWE-264

Type: Primary

Source: nvd@nist.gov

References

Hyperlink	Source	Resource
http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00004.html	psirt@adobe.com	N/A
http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00005.html	psirt@adobe.com	N/A
http://lists.opensuse.org/opensuse-updates/2013-01/msg00028.html	psirt@adobe.com	N/A
http://lists.opensuse.org/opensuse-updates/2013-01/msg00081.html	psirt@adobe.com	N/A
http://security.gentoo.org/glsa/glsa-201308-03.xml	psirt@adobe.com	N/A
http://www.adobe.com/support/security/bulletins/apsb13-02.html	psirt@adobe.com	Patch Vendor Advisory
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15969	psirt@adobe.com	N/A
http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00004.html	af854a3a-2127-422b-91ae-364da2661108	N/A
http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00005.html	af854a3a-2127-422b-91ae-364da2661108	N/A
http://lists.opensuse.org/opensuse-updates/2013-01/msg00028.html	af854a3a-2127-422b-91ae-364da2661108	N/A
http://lists.opensuse.org/opensuse-updates/2013-01/msg00081.html	af854a3a-2127-422b-91ae-364da2661108	N/A
http://security.gentoo.org/glsa/glsa-201308-03.xml	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.adobe.com/support/security/bulletins/apsb13-02.html	af854a3a-2127-422b-91ae-364da2661108	Patch Vendor Advisory
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15969	af854a3a-2127-422b-91ae-364da2661108	N/A

Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00004.html

Source: psirt@adobe.com

Resource: N/A

Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00005.html

Source: psirt@adobe.com

Resource: N/A

Hyperlink: http://lists.opensuse.org/opensuse-updates/2013-01/msg00028.html

Source: psirt@adobe.com

Resource: N/A

Hyperlink: http://lists.opensuse.org/opensuse-updates/2013-01/msg00081.html

Source: psirt@adobe.com

Resource: N/A

Hyperlink: http://security.gentoo.org/glsa/glsa-201308-03.xml

Source: psirt@adobe.com

Resource: N/A

Hyperlink: http://www.adobe.com/support/security/bulletins/apsb13-02.html

Source: psirt@adobe.com

Resource:

Patch

Vendor Advisory

Hyperlink: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15969

Source: psirt@adobe.com

Resource: N/A

Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00004.html

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00005.html

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: http://lists.opensuse.org/opensuse-updates/2013-01/msg00028.html

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: http://lists.opensuse.org/opensuse-updates/2013-01/msg00081.html

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: http://security.gentoo.org/glsa/glsa-201308-03.xml

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: http://www.adobe.com/support/security/bulletins/apsb13-02.html

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Patch

Vendor Advisory

Hyperlink: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15969

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Similar CVEs

1170Records found

CVE-2014-0552

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-6.05% / 90.83%

7 Day CHG~0.00%

Published-10 Sep, 2014 | 01:00

Updated-06 May, 2026 | 22:30

Adobe Flash Player before 13.0.0.244 and 14.x and 15.x before 15.0.0.152 on Windows and OS X and before 11.2.202.406 on Linux, Adobe AIR before 15.0.0.249 on Windows and OS X and before 15.0.0.252 on Android, Adobe AIR SDK before 15.0.0.249, and Adobe AIR SDK & Compiler before 15.0.0.249 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2014-0547, CVE-2014-0549, CVE-2014-0550, CVE-2014-0551, and CVE-2014-0555.

Vendor-n/a Apple Inc.Google LLC Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-adobe_air mac_os_x adobe_air_sdk windows flash_player android linux_kernel n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2014-0565

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-25.02% / 96.23%

7 Day CHG~0.00%

Published-17 Sep, 2014 | 10:00

Updated-06 May, 2026 | 22:30

Adobe Reader and Acrobat 10.x before 10.1.12 and 11.x before 11.0.09 on Windows and OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2014-0566.

Vendor-n/a Apple Inc.Microsoft Corporation Adobe Inc.

Product-acrobat acrobat_reader mac_os_x windows n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2014-0574

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-11.79% / 93.80%

7 Day CHG~0.00%

Published-11 Nov, 2014 | 23:00

Updated-06 May, 2026 | 22:30

Double free vulnerability in Adobe Flash Player before 13.0.0.252 and 14.x and 15.x before 15.0.0.223 on Windows and OS X and before 11.2.202.418 on Linux, Adobe AIR before 15.0.0.356, Adobe AIR SDK before 15.0.0.356, and Adobe AIR SDK & Compiler before 15.0.0.356 allows attackers to execute arbitrary code via unspecified vectors.

Vendor-n/a Apple Inc.Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-mac_os_x air_sdk_\&_compiler windows flash_player air_sdk air linux_kernel n/a

CWE ID-CWE-94

Improper Control of Generation of Code ('Code Injection')

CVE-2014-0493

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-12.55% / 94.03%

7 Day CHG~0.00%

Published-15 Jan, 2014 | 02:00

Updated-29 Apr, 2026 | 01:13

Adobe Reader and Acrobat 10.x before 10.1.9 and 11.x before 11.0.06 on Windows and Mac OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2014-0495.

Vendor-n/a Apple Inc.Microsoft Corporation Adobe Inc.

Product-acrobat windows mac_os_x n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2014-0495

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-4.85% / 89.65%

7 Day CHG~0.00%

Published-15 Jan, 2014 | 02:00

Updated-29 Apr, 2026 | 01:13

Vendor-n/a Apple Inc.Microsoft Corporation Adobe Inc.

Product-acrobat windows mac_os_x n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2014-0522

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-8.29% / 92.33%

7 Day CHG~0.00%

Published-14 May, 2014 | 10:00

Updated-06 May, 2026 | 22:30

Adobe Reader and Acrobat 10.x before 10.1.10 and 11.x before 11.0.07 on Windows and OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2014-0523, CVE-2014-0524, and CVE-2014-0526.

Vendor-n/a Apple Inc.Microsoft Corporation Adobe Inc.

Product-acrobat acrobat_reader mac_os_x windows n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2014-0524

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-8.29% / 92.33%

7 Day CHG~0.00%

Published-14 May, 2014 | 10:00

Updated-06 May, 2026 | 22:30

Vendor-n/a Apple Inc.Microsoft Corporation Adobe Inc.

Product-acrobat acrobat_reader mac_os_x windows n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2014-0573

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-8.24% / 92.30%

7 Day CHG~0.00%

Published-11 Nov, 2014 | 23:00

Updated-06 May, 2026 | 22:30

Use-after-free vulnerability in Adobe Flash Player before 13.0.0.252 and 14.x and 15.x before 15.0.0.223 on Windows and OS X and before 11.2.202.418 on Linux, Adobe AIR before 15.0.0.356, Adobe AIR SDK before 15.0.0.356, and Adobe AIR SDK & Compiler before 15.0.0.356 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2014-0588 and CVE-2014-8438.

Vendor-n/a Apple Inc.Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-mac_os_x air_sdk_\&_compiler windows flash_player air_sdk air linux_kernel n/a

CVE-2014-0540

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-1.23% / 79.40%

7 Day CHG~0.00%

Published-12 Aug, 2014 | 22:00

Updated-06 May, 2026 | 22:30

Adobe Flash Player before 13.0.0.241 and 14.x before 14.0.0.176 on Windows and OS X and before 11.2.202.400 on Linux, Adobe AIR before 14.0.0.178 on Windows and OS X and before 14.0.0.179 on Android, Adobe AIR SDK before 14.0.0.178, and Adobe AIR SDK & Compiler before 14.0.0.178 do not properly restrict discovery of memory addresses, which allows attackers to bypass the ASLR protection mechanism via unspecified vectors, a different vulnerability than CVE-2014-0542, CVE-2014-0543, CVE-2014-0544, and CVE-2014-0545.

Vendor-n/a Apple Inc.Google LLC Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-adobe_air mac_os_x adobe_air_sdk windows flash_player android linux_kernel n/a

CVE-2014-0528

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-14.84% / 94.59%

7 Day CHG~0.00%

Published-14 May, 2014 | 10:00

Updated-06 May, 2026 | 22:30

Double free vulnerability in Adobe Reader and Acrobat 10.x before 10.1.10 and 11.x before 11.0.07 on Windows and OS X allows attackers to execute arbitrary code via unspecified vectors.

Vendor-n/a Apple Inc.Microsoft Corporation Adobe Inc.

Product-acrobat acrobat_reader mac_os_x windows n/a

CVE-2014-0564

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-6.12% / 90.89%

7 Day CHG~0.00%

Published-15 Oct, 2014 | 10:00

Updated-06 May, 2026 | 22:30

Adobe Flash Player before 13.0.0.250 and 14.x and 15.x before 15.0.0.189 on Windows and OS X and before 11.2.202.411 on Linux, Adobe AIR before 15.0.0.293, Adobe AIR SDK before 15.0.0.302, and Adobe AIR SDK & Compiler before 15.0.0.302 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2014-0558.

Vendor-n/a Apple Inc.openSUSE Google LLC Linux Kernel Organization, Inc SUSE Microsoft Corporation Adobe Inc.

Product-evergreen linux_enterprise_desktop windows_8.1 windows_8 windows flash_player macos air_sdk iphone_os android air_desktop_runtime linux_kernel flash_player_desktop_runtime opensuse n/a

CVE-2014-0542

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-1.23% / 79.40%

7 Day CHG~0.00%

Published-12 Aug, 2014 | 22:00

Updated-06 May, 2026 | 22:30

Adobe Flash Player before 13.0.0.241 and 14.x before 14.0.0.176 on Windows and OS X and before 11.2.202.400 on Linux, Adobe AIR before 14.0.0.178 on Windows and OS X and before 14.0.0.179 on Android, Adobe AIR SDK before 14.0.0.178, and Adobe AIR SDK & Compiler before 14.0.0.178 do not properly restrict discovery of memory addresses, which allows attackers to bypass the ASLR protection mechanism via unspecified vectors, a different vulnerability than CVE-2014-0540, CVE-2014-0543, CVE-2014-0544, and CVE-2014-0545.

Vendor-n/a Apple Inc.Google LLC Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-adobe_air mac_os_x adobe_air_sdk windows flash_player android linux_kernel n/a

CVE-2014-0525

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-31.31% / 96.82%

7 Day CHG~0.00%

Published-14 May, 2014 | 10:00

Updated-06 May, 2026 | 22:30

The API in Adobe Reader and Acrobat 10.x before 10.1.10 and 11.x before 11.0.07 on Windows and OS X does not prevent access to unmapped memory, which allows attackers to execute arbitrary code via unspecified API calls.

Vendor-n/a Apple Inc.Microsoft Corporation Adobe Inc.

Product-acrobat acrobat_reader mac_os_x windows n/a

CVE-2014-0559

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-19.32% / 95.44%

7 Day CHG~0.00%

Published-10 Sep, 2014 | 01:00

Updated-06 May, 2026 | 22:30

Heap-based buffer overflow in Adobe Flash Player before 13.0.0.244 and 14.x and 15.x before 15.0.0.152 on Windows and OS X and before 11.2.202.406 on Linux, Adobe AIR before 15.0.0.249 on Windows and OS X and before 15.0.0.252 on Android, Adobe AIR SDK before 15.0.0.249, and Adobe AIR SDK & Compiler before 15.0.0.249 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2014-0556.

Vendor-n/a Apple Inc.Google LLC Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-adobe_air mac_os_x adobe_air_sdk windows flash_player android linux_kernel n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2014-0541

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-1.91% / 83.48%

7 Day CHG~0.00%

Published-12 Aug, 2014 | 22:00

Updated-06 May, 2026 | 22:30

Vendor-n/a Apple Inc.Google LLC Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-adobe_air mac_os_x adobe_air_sdk windows flash_player android linux_kernel n/a

CVE-2014-0582

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-23.40% / 96.02%

7 Day CHG~0.00%

Published-11 Nov, 2014 | 23:00

Updated-06 May, 2026 | 22:30

Heap-based buffer overflow in Adobe Flash Player before 13.0.0.252 and 14.x and 15.x before 15.0.0.223 on Windows and OS X and before 11.2.202.418 on Linux, Adobe AIR before 15.0.0.356, Adobe AIR SDK before 15.0.0.356, and Adobe AIR SDK & Compiler before 15.0.0.356 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2014-0589.

Vendor-n/a Apple Inc.Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-mac_os_x air_sdk_\&_compiler windows flash_player air_sdk air linux_kernel n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2014-0558

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-12.11% / 93.88%

7 Day CHG~0.00%

Published-15 Oct, 2014 | 10:00

Updated-06 May, 2026 | 22:30

Vendor-n/a Apple Inc.Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-adobe_air mac_os_x adobe_air_sdk windows flash_player linux_kernel n/a

CWE ID-CWE-94

Improper Control of Generation of Code ('Code Injection')

CVE-2014-0544

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-1.23% / 79.40%

7 Day CHG~0.00%

Published-12 Aug, 2014 | 22:00

Updated-06 May, 2026 | 22:30

Adobe Flash Player before 13.0.0.241 and 14.x before 14.0.0.176 on Windows and OS X and before 11.2.202.400 on Linux, Adobe AIR before 14.0.0.178 on Windows and OS X and before 14.0.0.179 on Android, Adobe AIR SDK before 14.0.0.178, and Adobe AIR SDK & Compiler before 14.0.0.178 do not properly restrict discovery of memory addresses, which allows attackers to bypass the ASLR protection mechanism via unspecified vectors, a different vulnerability than CVE-2014-0540, CVE-2014-0542, CVE-2014-0543, and CVE-2014-0545.

Vendor-n/a Apple Inc.Google LLC Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-adobe_air mac_os_x adobe_air_sdk windows flash_player android linux_kernel n/a

CVE-2014-0513

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-7.86% / 92.08%

7 Day CHG~0.00%

Published-14 May, 2014 | 10:00

Updated-06 May, 2026 | 22:30

Stack-based buffer overflow in Adobe Illustrator CS6 before 16.0.5 and 16.2.x before 16.2.2 allows remote attackers to execute arbitrary code via unspecified vectors.

Vendor-n/a Adobe Inc.

Product-illustrator n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2014-0549

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-6.05% / 90.83%

7 Day CHG~0.00%

Published-10 Sep, 2014 | 01:00

Updated-06 May, 2026 | 22:30

Adobe Flash Player before 13.0.0.244 and 14.x and 15.x before 15.0.0.152 on Windows and OS X and before 11.2.202.406 on Linux, Adobe AIR before 15.0.0.249 on Windows and OS X and before 15.0.0.252 on Android, Adobe AIR SDK before 15.0.0.249, and Adobe AIR SDK & Compiler before 15.0.0.249 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2014-0547, CVE-2014-0550, CVE-2014-0551, CVE-2014-0552, and CVE-2014-0555.

Vendor-n/a Apple Inc.Google LLC Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-adobe_air mac_os_x adobe_air_sdk windows flash_player android linux_kernel n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2014-0496

Matching Score-8

Matching Score-8

CVSS Score-8.8||HIGH

EPSS-71.12% / 98.73%

7 Day CHG+4.88%

Published-15 Jan, 2014 | 02:00

Updated-21 Apr, 2026 | 21:11

Known KEV||Action Due Date - 2022-03-24||Apply updates per vendor instructions.

Use-after-free vulnerability in Adobe Reader and Acrobat 10.x before 10.1.9 and 11.x before 11.0.06 on Windows and Mac OS X allows attackers to execute arbitrary code via unspecified vectors.

Vendor-n/a Microsoft Corporation Adobe Inc.Apple Inc.

Product-acrobat windows mac_os_x n/a Reader and Acrobat

CWE ID-CWE-416

Use After Free

CVE-2020-3742

Matching Score-8

Matching Score-8

CVSS Score-9.8||CRITICAL

EPSS-4.79% / 89.59%

7 Day CHG~0.00%

Published-13 Feb, 2020 | 15:07

Updated-04 Aug, 2024 | 07:44

Adobe Acrobat and Reader versions, 2019.021.20061 and earlier, 2017.011.30156 and earlier, 2017.011.30156 and earlier, and 2015.006.30508 and earlier have a heap overflow vulnerability. Successful exploitation could lead to arbitrary code execution .

Product-acrobat_dc windows macos acrobat_reader_dc Adobe Acrobat and Reader

CWE ID-CWE-787

Out-of-bounds Write

CVE-2013-5329

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-11.53% / 93.71%

7 Day CHG~0.00%

Published-13 Nov, 2013 | 01:00

Updated-29 Apr, 2026 | 01:13

Adobe Flash Player before 11.7.700.252 and 11.8.x and 11.9.x before 11.9.900.152 on Windows and Mac OS X and before 11.2.202.327 on Linux, Adobe AIR before 3.9.0.1210, Adobe AIR SDK before 3.9.0.1210, and Adobe AIR SDK & Compiler before 3.9.0.1210 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2013-5330.

Vendor-n/a Apple Inc.Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-mac_os_x windows flash_player air_sdk air linux_kernel n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2013-5334

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-8.29% / 92.33%

7 Day CHG~0.00%

Published-11 Dec, 2013 | 15:00

Updated-29 Apr, 2026 | 01:13

Adobe Shockwave Player before 12.0.7.148 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2013-5333.

Vendor-n/a Adobe Inc.

Product-shockwave_player n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2013-5330

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-2.95% / 86.60%

7 Day CHG~0.00%

Published-13 Nov, 2013 | 01:00

Updated-29 Apr, 2026 | 01:13

Vendor-n/a Apple Inc.Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-mac_os_x windows flash_player air_sdk air linux_kernel n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2013-5327

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-10.80% / 93.44%

7 Day CHG~0.00%

Published-09 Oct, 2013 | 14:44

Updated-29 Apr, 2026 | 01:13

MDBMS.dll in Adobe RoboHelp 10 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.

Vendor-n/a Adobe Inc.

Product-robohelp n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2009-2028

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-10||HIGH

EPSS-3.90% / 88.40%

7 Day CHG~0.00%

Published-11 Jun, 2009 | 15:00

Updated-23 Apr, 2026 | 00:35

Multiple unspecified vulnerabilities in Adobe Reader 7 and Acrobat 7 before 7.1.3, Adobe Reader 8 and Acrobat 8 before 8.1.6, and Adobe Reader 9 and Acrobat 9 before 9.1.2 have unknown impact and attack vectors, related to "Adobe internally discovered issues."

Vendor-n/a Adobe Inc.

CVE-2020-3752

Matching Score-8

Matching Score-8

CVSS Score-9.8||CRITICAL

EPSS-3.12% / 86.99%

7 Day CHG~0.00%

Published-13 Feb, 2020 | 15:47

Updated-04 Aug, 2024 | 07:44

Adobe Acrobat and Reader versions 2019.021.20061 and earlier, 2017.011.30156 and earlier, 2017.011.30156 and earlier, and 2015.006.30508 and earlier have a buffer error vulnerability. Successful exploitation could lead to arbitrary code execution .

Product-acrobat_dc windows macos acrobat_reader_dc Adobe Acrobat and Reader

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2020-3743

Matching Score-8

Matching Score-8

CVSS Score-9.8||CRITICAL

EPSS-4.79% / 89.59%

7 Day CHG~0.00%

Published-13 Feb, 2020 | 15:44

Updated-04 Aug, 2024 | 07:44

Adobe Acrobat and Reader versions 2019.021.20061 and earlier, 2017.011.30156 and earlier, 2017.011.30156 and earlier, and 2015.006.30508 and earlier have an use after free vulnerability. Successful exploitation could lead to arbitrary code execution .

Product-acrobat_dc windows macos acrobat_reader_dc Adobe Acrobat and Reader

CWE ID-CWE-416

Use After Free

CVE-2013-3347

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-7.99% / 92.17%

7 Day CHG~0.00%

Published-10 Jul, 2013 | 10:00

Updated-29 Apr, 2026 | 01:13

Integer overflow in Adobe Flash Player before 11.7.700.232 and 11.8.x before 11.8.800.94 on Windows and Mac OS X, before 11.2.202.297 on Linux, before 11.1.111.64 on Android 2.x and 3.x, and before 11.1.115.69 on Android 4.x allows attackers to execute arbitrary code via PCM data that is not properly handled during resampling.

Vendor-n/a Apple Inc.Google LLC Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-mac_os_x windows flash_player android linux_kernel n/a

CVE-2013-3332

Matching Score-8

Matching Score-8

Product-adobe_air mac_os_x enterprise_linux_server enterprise_linux_workstation linux_enterprise_desktop enterprise_linux_desktop adobe_air_sdk enterprise_linux_server_eus windows flash_player enterprise_linux_eus android linux_kernel opensuse n/a

CVSS Score-10||HIGH

EPSS-2.03% / 83.98%

7 Day CHG~0.00%

Published-16 May, 2013 | 10:00

Updated-29 Apr, 2026 | 01:13

Adobe Flash Player before 10.3.183.86 and 11.x before 11.7.700.202 on Windows and Mac OS X, before 10.3.183.86 and 11.x before 11.2.202.285 on Linux, before 11.1.111.54 on Android 2.x and 3.x, and before 11.1.115.58 on Android 4.x; Adobe AIR before 3.7.0.1860; and Adobe AIR SDK & Compiler before 3.7.0.1860 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2013-2728, CVE-2013-3324, CVE-2013-3325, CVE-2013-3326, CVE-2013-3327, CVE-2013-3328, CVE-2013-3329, CVE-2013-3330, CVE-2013-3331, CVE-2013-3333, CVE-2013-3334, and CVE-2013-3335.

Vendor-n/a Apple Inc.openSUSE Google LLC Linux Kernel Organization, Inc SUSE Red Hat, Inc.Microsoft Corporation Adobe Inc.

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2013-3339

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-18.88% / 95.38%

7 Day CHG~0.00%

Published-16 May, 2013 | 10:00

Updated-29 Apr, 2026 | 01:13

Adobe Reader and Acrobat 9.x before 9.5.5, 10.x before 10.1.7, and 11.x before 11.0.03 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2013-2718, CVE-2013-2719, CVE-2013-2720, CVE-2013-2721, CVE-2013-2722, CVE-2013-2723, CVE-2013-2725, CVE-2013-2726, CVE-2013-2731, CVE-2013-2732, CVE-2013-2734, CVE-2013-2735, CVE-2013-2736, CVE-2013-3337, CVE-2013-3338, CVE-2013-3340, and CVE-2013-3341.

Vendor-n/a Adobe Inc.

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2013-3345

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-7.53% / 91.89%

7 Day CHG~0.00%

Published-10 Jul, 2013 | 10:00

Updated-29 Apr, 2026 | 01:13

Adobe Flash Player before 11.7.700.232 and 11.8.x before 11.8.800.94 on Windows and Mac OS X, before 11.2.202.297 on Linux, before 11.1.111.64 on Android 2.x and 3.x, and before 11.1.115.69 on Android 4.x allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.

Vendor-n/a Apple Inc.Google LLC Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-mac_os_x windows flash_player android linux_kernel n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2013-3354

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-26.11% / 96.34%

7 Day CHG~0.00%

Published-11 Sep, 2013 | 23:00

Updated-29 Apr, 2026 | 01:13

Adobe Reader and Acrobat before 10.1.8 and 11.x before 11.0.04 on Windows and Mac OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2013-3352 and CVE-2013-3355.

Vendor-n/a Apple Inc.Microsoft Corporation Adobe Inc.

Product-acrobat acrobat_reader mac_os_x windows n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2013-3334

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-4.00% / 88.54%

7 Day CHG~0.00%

Published-16 May, 2013 | 10:00

Updated-29 Apr, 2026 | 01:13

Vendor-n/a Apple Inc.openSUSE Google LLC Linux Kernel Organization, Inc SUSE Red Hat, Inc.Microsoft Corporation Adobe Inc.

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2013-3328

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-4.00% / 88.54%

7 Day CHG~0.00%

Published-16 May, 2013 | 10:00

Updated-29 Apr, 2026 | 01:13

Adobe Flash Player before 10.3.183.86 and 11.x before 11.7.700.202 on Windows and Mac OS X, before 10.3.183.86 and 11.x before 11.2.202.285 on Linux, before 11.1.111.54 on Android 2.x and 3.x, and before 11.1.115.58 on Android 4.x; Adobe AIR before 3.7.0.1860; and Adobe AIR SDK & Compiler before 3.7.0.1860 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2013-2728, CVE-2013-3324, CVE-2013-3325, CVE-2013-3326, CVE-2013-3327, CVE-2013-3329, CVE-2013-3330, CVE-2013-3331, CVE-2013-3332, CVE-2013-3333, CVE-2013-3334, and CVE-2013-3335.

Vendor-n/a Apple Inc.openSUSE Google LLC Linux Kernel Organization, Inc SUSE Red Hat, Inc.Microsoft Corporation Adobe Inc.

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2013-3358

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-37.54% / 97.24%

7 Day CHG~0.00%

Published-11 Sep, 2013 | 23:00

Updated-29 Apr, 2026 | 01:13

Integer overflow in Adobe Reader and Acrobat before 10.1.8 and 11.x before 11.0.04 on Windows and Mac OS X allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2013-3357.

Vendor-n/a Apple Inc.Microsoft Corporation Adobe Inc.

Product-acrobat acrobat_reader mac_os_x windows n/a

CVE-2013-3331

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-2.03% / 83.98%

7 Day CHG~0.00%

Published-16 May, 2013 | 10:00

Updated-29 Apr, 2026 | 01:13

Adobe Flash Player before 10.3.183.86 and 11.x before 11.7.700.202 on Windows and Mac OS X, before 10.3.183.86 and 11.x before 11.2.202.285 on Linux, before 11.1.111.54 on Android 2.x and 3.x, and before 11.1.115.58 on Android 4.x; Adobe AIR before 3.7.0.1860; and Adobe AIR SDK & Compiler before 3.7.0.1860 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2013-2728, CVE-2013-3324, CVE-2013-3325, CVE-2013-3326, CVE-2013-3327, CVE-2013-3328, CVE-2013-3329, CVE-2013-3330, CVE-2013-3332, CVE-2013-3333, CVE-2013-3334, and CVE-2013-3335.

Vendor-n/a Apple Inc.openSUSE Google LLC Linux Kernel Organization, Inc SUSE Red Hat, Inc.Microsoft Corporation Adobe Inc.

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2013-3353

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-43.98% / 97.58%

7 Day CHG~0.00%

Published-11 Sep, 2013 | 23:00

Updated-29 Apr, 2026 | 01:13

Buffer overflow in Adobe Reader and Acrobat before 10.1.8 and 11.x before 11.0.04 on Windows and Mac OS X allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2013-3356.

Vendor-n/a Apple Inc.Microsoft Corporation Adobe Inc.

Product-acrobat acrobat_reader mac_os_x windows n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2013-3360

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-26.11% / 96.34%

7 Day CHG~0.00%

Published-11 Sep, 2013 | 23:00

Updated-29 Apr, 2026 | 01:13

Adobe Shockwave Player before 12.0.4.144 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2013-3359.

Vendor-n/a Adobe Inc.

Product-shockwave_player n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2013-3342

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-2.69% / 86.03%

7 Day CHG~0.00%

Published-16 May, 2013 | 10:00

Updated-29 Apr, 2026 | 01:13

Adobe Reader and Acrobat 9.x before 9.5.5, 10.x before 10.1.7, and 11.x before 11.0.03 do not properly handle operating-system domain blacklists, which has unspecified impact and attack vectors.

Vendor-n/a Adobe Inc.

CWE ID-CWE-20

Improper Input Validation

CVE-2020-3763

Matching Score-8

Matching Score-8

CVSS Score-9.8||CRITICAL

EPSS-1.32% / 80.10%

7 Day CHG~0.00%

Published-13 Feb, 2020 | 15:43

Updated-04 Aug, 2024 | 07:44

Adobe Acrobat and Reader versions 2019.021.20061 and earlier, 2017.011.30156 and earlier, 2017.011.30156 and earlier, and 2015.006.30508 and earlier have a privilege escalation vulnerability. Successful exploitation could lead to arbitrary file system write.

Product-acrobat_dc windows macos acrobat_reader_dc Adobe Acrobat and Reader

CVE-2013-3324

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-4.00% / 88.54%

7 Day CHG~0.00%

Published-16 May, 2013 | 10:00

Updated-29 Apr, 2026 | 01:13

Adobe Flash Player before 10.3.183.86 and 11.x before 11.7.700.202 on Windows and Mac OS X, before 10.3.183.86 and 11.x before 11.2.202.285 on Linux, before 11.1.111.54 on Android 2.x and 3.x, and before 11.1.115.58 on Android 4.x; Adobe AIR before 3.7.0.1860; and Adobe AIR SDK & Compiler before 3.7.0.1860 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2013-2728, CVE-2013-3325, CVE-2013-3326, CVE-2013-3327, CVE-2013-3328, CVE-2013-3329, CVE-2013-3330, CVE-2013-3331, CVE-2013-3332, CVE-2013-3333, CVE-2013-3334, and CVE-2013-3335.

Vendor-n/a Apple Inc.openSUSE Google LLC Linux Kernel Organization, Inc SUSE Red Hat, Inc.Microsoft Corporation Adobe Inc.

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2013-3337

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-18.88% / 95.38%

7 Day CHG~0.00%

Published-16 May, 2013 | 10:00

Updated-29 Apr, 2026 | 01:13

Adobe Reader and Acrobat 9.x before 9.5.5, 10.x before 10.1.7, and 11.x before 11.0.03 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2013-2718, CVE-2013-2719, CVE-2013-2720, CVE-2013-2721, CVE-2013-2722, CVE-2013-2723, CVE-2013-2725, CVE-2013-2726, CVE-2013-2731, CVE-2013-2732, CVE-2013-2734, CVE-2013-2735, CVE-2013-2736, CVE-2013-3338, CVE-2013-3339, CVE-2013-3340, and CVE-2013-3341.

Vendor-n/a Adobe Inc.

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2013-3344

Matching Score-8

Matching Score-8

CVSS Score-10||HIGH

EPSS-7.90% / 92.11%

7 Day CHG~0.00%

Published-10 Jul, 2013 | 10:00

Updated-29 Apr, 2026 | 01:13

Heap-based buffer overflow in Adobe Flash Player before 11.7.700.232 and 11.8.x before 11.8.800.94 on Windows and Mac OS X, before 11.2.202.297 on Linux, before 11.1.111.64 on Android 2.x and 3.x, and before 11.1.115.69 on Android 4.x allows attackers to execute arbitrary code via unspecified vectors.

Vendor-n/a Apple Inc.Google LLC Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-mac_os_x windows flash_player android linux_kernel n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2020-3740

Matching Score-8

Matching Score-8

CVSS Score-9.8||CRITICAL

EPSS-8.03% / 92.20%

7 Day CHG~0.00%

Published-13 Feb, 2020 | 14:51

Updated-04 Aug, 2024 | 07:44

Adobe Framemaker versions 2019.0.4 and below have a memory corruption vulnerability. Successful exploitation could lead to arbitrary code execution.

Vendor-Microsoft Corporation Adobe Inc.

Product-framemaker windows Adobe Framemaker

CWE ID-CWE-787

Out-of-bounds Write

CVE-2013-3329

Matching Score-8

Matching Score-8