Class familyAdobe · Acrobat and Reader
Adobe Acrobat and Reader information disclosure flaws, 2008–2025
4 Acrobat and Reader CVEs with CWE-200 weaknesses, 7 Feb 2008 to 10 Jun 2025. 1 is in CISA KEVThe US Cybersecurity and Infrastructure Security Agency’s list of Known Exploited Vulnerabilities. A CVE is added when CISA has evidence that attackers are using it..
CVEs by year
Published each year. Select a CVE to open it.Grouped by product and weakness type (CWE); not proven to share a root cause.
1 2008’08
2009’09
2010’10
2011’11
2012’12
2013’13
2014’14
2015’15
2016’16
2017’17
2018’18
2019’19
2020’20
1 2021’21
2022’22
1 2023’23
2024’24
1 2025’25
In CISA KEVNot in KEV
20081 CVE, 1 in KEV
20211 CVE
20231 CVE
20251 CVE
CVEs in this family
Table view of the years above| CVE | Published | Title | Linked from | Priority |
|---|---|---|---|---|
| CVE-2008-0655KEV | 7 Feb 2008 | Adobe Acrobat and Reader Unspecified Vulnerability | Grouped by weakness | 68.9 |
| CVE-2021-39857 | 29 Sep 2021 | Adobe Acrobat Reader DC Information Disclosure via ActiveX LoadFile | Grouped by weakness | 20.0 |
| CVE-2023-38245 | 10 Aug 2023 | Adobe Acrobat Reader DC ActiveX Control (AxAcroPDFLib.AxAcroPDF) src NTLMv2 SSO Hash Theft Vulnerability | Grouped by weakness | 11.0 |
| CVE-2025-43579 | 10 Jun 2025 | Acrobat Reader | Information Exposure (CWE-200) | Grouped by weakness | 5.9 |