Class familyAdobe · Reader and Acrobat
Adobe Acrobat and Reader use-after-free flaws, 2009–2026
65 Reader and Acrobat CVEs with CWE-416 weaknesses, 15 Dec 2009 to 9 Jun 2026. 5 are in CISA KEVThe US Cybersecurity and Infrastructure Security Agency’s list of Known Exploited Vulnerabilities. A CVE is added when CISA has evidence that attackers are using it..
CVEs by year
Published each year. Select a CVE to open it.Grouped by product and weakness type (CWE); not proven to share a root cause.
1 2009’09
2010’10
2011’11
2012’12
2013’13
1 2014’14
2015’15
2016’16
2017’17
2018’18
2019’19
1 2020’20
18 2021’21
13 2022’22
22 2023’23
3 2024’24
2025’25
6 2026’26
In CISA KEVNot in KEV
20091 CVE, 1 in KEV
20141 CVE, 1 in KEV
20201 CVE, 1 in KEV
202118 CVEs, 1 in KEV
202213 CVEs
202322 CVEs, 1 in KEV
- CVE-2023-21608
- CVE-2023-26417
- CVE-2023-26418
- CVE-2023-26419
- CVE-2023-26420
- CVE-2023-26422
- CVE-2023-26423
- CVE-2023-26424
- CVE-2023-38222
- CVE-2023-38224
- CVE-2023-38225
- CVE-2023-38227
- CVE-2023-38228
- CVE-2021-21088
- CVE-2019-16471
- CVE-2022-34224
- CVE-2022-34227
- CVE-2023-44336
- CVE-2023-44359
- CVE-2023-44367
- CVE-2023-44371
- CVE-2023-44372
20243 CVEs
20266 CVEs
CVEs in this family
Table view of the years above| CVE | Published | Title | Linked from | Priority |
|---|---|---|---|---|
| CVE-2009-4324KEV | 15 Dec 2009 | Adobe Acrobat and Reader Use-After-Free Vulnerability | Grouped by weakness | 53.4 |
| CVE-2014-0496KEV | 15 Jan 2014 | Adobe Reader and Acrobat Use-After-Free Vulnerability | Grouped by weakness | 48.9 |
| CVE-2020-9715KEV | 19 Aug 2020 | Adobe Acrobat Use-After-Free Vulnerability | Grouped by weakness | 73.1 |
| CVE-2021-21021 | 11 Feb 2021 | Acrobat Reader DC Use-After-Free Vulnerability Could Lead To Arbitrary Code Execution | Grouped by weakness | 24.3 |
| CVE-2021-21028 | 11 Feb 2021 | Acrobat Reader DC Use-After-Free Vulnerability Could Lead To Arbitrary Code Execution | Grouped by weakness | 24.3 |
| CVE-2021-21033 | 11 Feb 2021 | Acrobat Reader DC Use-After-Free Vulnerability Could Lead To Arbitrary Code Execution | Grouped by weakness | 24.3 |
| CVE-2021-21035 | 11 Feb 2021 | Acrobat Reader DC Use-After-Free Vulnerability Could Lead To Arbitrary Code Execution | Grouped by weakness | 24.3 |
| CVE-2021-21039 | 11 Feb 2021 | Acrobat Reader DC Use-After-Free Vulnerability Could Lead To Arbitrary Code Execution | Grouped by weakness | 23.0 |
| CVE-2021-21040 | 11 Feb 2021 | Acrobat Reader DC Use-After-Free Vulnerability Could Lead To Arbitrary Code Execution | Grouped by weakness | 23.0 |
| CVE-2021-21041 | 11 Feb 2021 | Acrobat Reader DC Use-After-Free Vulnerability Could Lead To Arbitrary Code Execution | Grouped by weakness | 23.0 |
| CVE-2021-28635 | 20 Aug 2021 | Adobe Acrobat Reader Use-After-Free Vulnerability | Grouped by weakness | 25.2 |
| CVE-2021-28639 | 20 Aug 2021 | Adobe Acrobat Reader DC setAction Use-After-Free Remote Code Execution Vulnerability | Grouped by weakness | 25.3 |
| CVE-2021-28640 | 20 Aug 2021 | Adobe Acrobat Reader Use-After-Free Arbitrary Code Execution Vulnerability | Grouped by weakness | 24.9 |
| CVE-2021-28641 | 20 Aug 2021 | Adobe Acrobat Reader Use-After-Free Arbitrary Code Execution Vulnerability | Grouped by weakness | 23.7 |
| CVE-2021-35981 | 20 Aug 2021 | Adobe Acrobat Reader DC launchURL Use-After-Free Remote Code Execution Vulnerability | Grouped by weakness | 23.5 |
| CVE-2021-35983 | 20 Aug 2021 | Adobe Acrobat Reader DC AcroForm Use-After-Free Remote Code Execution Vulnerability | Grouped by weakness | 23.5 |
| CVE-2021-28552 | 24 Aug 2021 | Adobe Acrobat Reader DC XFA Template Use-After-Free Remote Code Execution Vulnerability | Grouped by weakness | 23.8 |
| CVE-2021-28631 | 24 Aug 2021 | Adobe Acrobat Reader DC AcroForm Field Use-After-Free Remote Code Execution Vulnerability | Grouped by weakness | 23.8 |
| CVE-2021-28632 | 24 Aug 2021 | ZDI-CAN-13471: Adobe Acrobat Reader DC AcroForm Field Use-After-Free Remote Code Execution Vulnerability | Grouped by weakness | 23.9 |
| CVE-2021-28550KEV | 2 Sep 2021 | Adobe Acrobat and Reader Use-After-Free Vulnerability | Grouped by weakness | 63.9 |
| CVE-2021-28553 | 2 Sep 2021 | Adobe Acrobat Reader use-after-free vulnerability could lead to arbitrary code execution | Grouped by weakness | 24.0 |
| CVE-2022-24102 | 11 May 2022 | Adobe Acrobat Reader DC Annotation Use-After-Free Remote Code Execution Vulnerability | Grouped by weakness | 24.7 |
| CVE-2022-24103 | 11 May 2022 | Adobe Acrobat Reader DC Annotation Use-After-Free Remote Code Execution Vulnerability | Grouped by weakness | 23.4 |
| CVE-2022-24104 | 11 May 2022 | Adobe Acrobat Reader DC Annotation Use-After-Free Remote Code Execution Vulnerability | Grouped by weakness | 24.6 |
| CVE-2022-28240 | 11 May 2022 | Adobe Acrobat Reader DC Annotation Use-After-Free Remote Code Execution Vulnerability | Grouped by weakness | 24.7 |
| CVE-2022-28242 | 11 May 2022 | Adobe Acrobat Reader DC Annotation Use-After-Free Remote Code Execution Vulnerability | Grouped by weakness | 23.4 |
| CVE-2022-34216 | 15 Jul 2022 | Adobe Acrobat Reader DC PDF Parsing Use-After-Free Remote Code Execution Vulnerability | Grouped by weakness | 24.2 |
| CVE-2022-34219 | 15 Jul 2022 | Adobe Acrobat Reader DC Font Parsing Use-After-Free Remote Code Execution Vulnerability | Grouped by weakness | 24.2 |
| CVE-2022-34220 | 15 Jul 2022 | Acrobat Reader DC Font Parsing Use-After-Free Remote Code Execution Vulnerability | Grouped by weakness | 23.7 |
| CVE-2022-34223 | 15 Jul 2022 | Adobe Acrobat Reader DC AcroForm currentValueIndices Use-After-Free Remote Code Execution Vulnerability | Grouped by weakness | 23.4 |
| CVE-2022-34225 | 15 Jul 2022 | Adobe Acrobat Reader DC AcroForm exportValues Use-After-Free Remote Code Execution Vulnerability | Grouped by weakness | 23.3 |
| CVE-2022-34229 | 15 Jul 2022 | Adobe Acrobat Reader DC AcroForm rect Use-After-Free Remote Code Execution Vulnerability | Grouped by weakness | 23.4 |
| CVE-2022-34230 | 15 Jul 2022 | Adobe Acrobat Reader Use After Free could lead to Arbitrary code execution | Grouped by weakness | 23.3 |
| CVE-2022-35665 | 11 Aug 2022 | Adobe Acrobat Reader Use-After-Free Arbitrary Code Execution | Grouped by weakness | 23.5 |
| CVE-2023-21608KEV | 18 Jan 2023 | Adobe Acrobat and Reader Use-After-Free Vulnerability | Grouped by weakness | 68.3 |
| CVE-2023-26417 | 12 Apr 2023 | ZDI-CAN-20583: Adobe Acrobat Reader DC Popup Use-After-Free Remote Code Execution Vulnerability | Grouped by weakness | 22.5 |
| CVE-2023-26418 | 12 Apr 2023 | ZDI-CAN-20311: Adobe Acrobat Reader DC AcroForm exportAsFDFStr Use-After-Free Remote Code Execution Vulnerability | Grouped by weakness | 22.7 |
| CVE-2023-26419 | 12 Apr 2023 | ZDI-CAN-20274: Adobe Acrobat Reader DC AcroForm removeField Use-After-Free Remote Code Execution Vulnerability | Grouped by weakness | 22.7 |
| CVE-2023-26420 | 12 Apr 2023 | ZDI-CAN-20227: Adobe Acrobat Reader DC AcroForm addField Use-After-Free Remote Code Execution Vulnerability | Grouped by weakness | 22.7 |
| CVE-2023-26422 | 12 Apr 2023 | ZDI-CAN-20176: Adobe Acrobat Reader DC AcroForm deleteItemAt Use-After-Free Remote Code Execution Vulnerability | Grouped by weakness | 23.0 |
| CVE-2023-26423 | 12 Apr 2023 | ZDI-CAN-20160: Adobe Acrobat Reader DC AcroForm insertItemAt Use-After-Free Remote Code Execution Vulnerability | Grouped by weakness | 23.0 |
| CVE-2023-26424 | 12 Apr 2023 | ZDI-CAN-19833: Adobe Acrobat Reader DC PDF Parsing Use-After-Free Remote Code Execution Vulnerability | Grouped by weakness | 22.7 |
| CVE-2023-38222 | 10 Aug 2023 | ZDI-CAN-21103: Adobe Acrobat Reader DC AcroForm spawnPageFromTemplate Use-After-Free Remote Code Execution Vulnerability | Grouped by weakness | 23.1 |
| CVE-2023-38224 | 10 Aug 2023 | ZDI-CAN-21122: Adobe Acrobat Reader DC Annotation Use-After-Free Remote Code Execution Vulnerability | Grouped by weakness | 23.3 |
| CVE-2023-38225 | 10 Aug 2023 | ZDI-CAN-21118: Adobe Acrobat Reader DC AcroForm Use-After-Free Remote Code Execution Vulnerability | Grouped by weakness | 23.3 |
| CVE-2023-38227 | 10 Aug 2023 | ZDI-CAN-21241: Adobe Acrobat Reader DC Font Parsing Use-After-Free Remote Code Execution Vulnerability | Grouped by weakness | 23.2 |
| CVE-2023-38228 | 10 Aug 2023 | ZDI-CAN-21317: Adobe Acrobat Reader DC Font Parsing Use-After-Free Remote Code Execution Vulnerability | Grouped by weakness | 23.2 |
| CVE-2021-21088 | 6 Sep 2023 | Adobe Acrobat Pro DC Use-After-Free Remote Code Execution Vulnerability | Grouped by weakness | 11.9 |
| CVE-2019-16471 | 11 Sep 2023 | Use-After-Free in app.measureDialog - Tianfu Cup | Grouped by weakness | 10.7 |
| CVE-2022-34224 | 11 Sep 2023 | Adobe Acrobat Reader DC AcroForm setItems Use-After-Free Remote Code Execution Vulnerability | Grouped by weakness | 22.9 |
| CVE-2022-34227 | 11 Sep 2023 | Adobe Acrobat Reader DC AcroForm value Use-After-Free Remote Code Execution Vulnerability | Grouped by weakness | 22.8 |
| CVE-2023-44336 | 16 Nov 2023 | TALOS-2023-1794 - Adobe Acrobat Reader Thermometer use-after-free vulnerability | Grouped by weakness | 22.1 |
| CVE-2023-44359 | 16 Nov 2023 | ZDI-CAN-21936: Adobe Acrobat Reader DC Font Parsing Use-After-Free Remote Code Execution Vulnerability | Grouped by weakness | 21.9 |
| CVE-2023-44367 | 16 Nov 2023 | ZDI-CAN-21929: Adobe Acrobat Reader DC Font Parsing Use-After-Free Remote Code Execution Vulnerability | Grouped by weakness | 21.9 |
| CVE-2023-44371 | 16 Nov 2023 | ZDI-CAN-21998: Adobe Acrobat Reader DC Font Parsing Use-After-Free Remote Code Execution Vulnerability | Grouped by weakness | 23.9 |
| CVE-2023-44372 | 16 Nov 2023 | TALOS-2023-1842 - Adobe Acrobat Reader U3D page event use-after-free vulnerability | Grouped by weakness | 22.5 |
| CVE-2022-44514 | 18 Dec 2024 | Acrobat Reader | Use After Free (CWE-416) | Grouped by weakness | 11.5 |
| CVE-2022-44518 | 18 Dec 2024 | Acrobat Reader | Use After Free (CWE-416) | Grouped by weakness | 11.5 |
| CVE-2022-44520 | 18 Dec 2024 | Acrobat Reader | Use After Free (CWE-416) | Grouped by weakness | 11.5 |
| CVE-2026-47912 | 9 Jun 2026 | Acrobat Reader | Use After Free (CWE-416) | Grouped by weakness | 10.7 |
| CVE-2026-47917 | 9 Jun 2026 | Acrobat Reader | Use After Free (CWE-416) | Grouped by weakness | 10.2 |
| CVE-2026-47918 | 9 Jun 2026 | Acrobat Reader | Use After Free (CWE-416) | Grouped by weakness | 9.9 |
| CVE-2026-47919 | 9 Jun 2026 | Acrobat Reader | Use After Free (CWE-416) | Grouped by weakness | 9.9 |
| CVE-2026-47920 | 9 Jun 2026 | Acrobat Reader | Use After Free (CWE-416) | Grouped by weakness | 6.6 |
| CVE-2026-47955 | 9 Jun 2026 | Acrobat Reader | Use After Free (CWE-416) | Grouped by weakness | 6.6 |