cve,link,title,description,vendor,products,score,severity,epss,cisa,cisa_published,article,ransomware,exploited,exploited_date,poc,trended,trended_no_1,trended_no_1_date,published,trended_score CVE-2017-11240,https://securityvulnerability.io/vulnerability/CVE-2017-11240,,"Adobe Acrobat and Reader versions 2017.012.20098 and earlier, 2017.011.30066 and earlier, 2015.006.30355 and earlier, 11.0.22 and earlier have an exploitable out-of-bounds read vulnerability. Successful exploitation could lead to arbitrary code execution in the context of the current user.",Adobe,"Adobe Acrobat And Reader 2017.012.20098 And Earlier Versions, 2017.011.30066 And Earlier Versions, 2015.006.30355 And Earlier Versions, 11.0.22 And Earlier Versions",9.8,CRITICAL,0.009680000133812428,false,,false,false,false,,,false,false,,2018-05-19T17:00:00.000Z,0 CVE-2017-11306,https://securityvulnerability.io/vulnerability/CVE-2017-11306,,"Adobe Acrobat and Reader versions 2017.012.20098 and earlier, 2017.011.30066 and earlier, 2015.006.30355 and earlier, 11.0.22 and earlier have an exploitable out-of-bounds read vulnerability. Successful exploitation could lead to arbitrary code execution in the context of the current user.",Adobe,"Adobe Acrobat And Reader 2017.012.20098 And Earlier Versions, 2017.011.30066 And Earlier Versions, 2015.006.30355 And Earlier Versions, 11.0.22 And Earlier Versions",9.8,CRITICAL,0.009680000133812428,false,,false,false,false,,,false,false,,2018-05-19T17:00:00.000Z,0 CVE-2017-11307,https://securityvulnerability.io/vulnerability/CVE-2017-11307,,"Adobe Acrobat and Reader versions 2017.012.20098 and earlier, 2017.011.30066 and earlier, 2015.006.30355 and earlier, 11.0.22 and earlier have an exploitable out-of-bounds read vulnerability. Successful exploitation could lead to arbitrary code execution in the context of the current user.",Adobe,"Adobe Acrobat And Reader 2017.012.20098 And Earlier Versions, 2017.011.30066 And Earlier Versions, 2015.006.30355 And Earlier Versions, 11.0.22 And Earlier Versions",9.8,CRITICAL,0.009680000133812428,false,,false,false,false,,,false,false,,2018-05-19T17:00:00.000Z,0 CVE-2017-11250,https://securityvulnerability.io/vulnerability/CVE-2017-11250,,"Adobe Acrobat and Reader versions 2017.012.20098 and earlier, 2017.011.30066 and earlier, 2015.006.30355 and earlier, 11.0.22 and earlier have an exploitable out-of-bounds read vulnerability. Successful exploitation could lead to arbitrary code execution in the context of the current user.",Adobe,"Adobe Acrobat And Reader 2017.012.20098 And Earlier Versions, 2017.011.30066 And Earlier Versions, 2015.006.30355 And Earlier Versions, 11.0.22 And Earlier Versions",9.8,CRITICAL,0.009680000133812428,false,,false,false,false,,,false,false,,2018-05-19T17:00:00.000Z,0 CVE-2017-11308,https://securityvulnerability.io/vulnerability/CVE-2017-11308,,"Adobe Acrobat and Reader versions 2017.012.20098 and earlier, 2017.011.30066 and earlier, 2015.006.30355 and earlier, 11.0.22 and earlier have an exploitable heap overflow vulnerability. Successful exploitation could lead to arbitrary code execution in the context of the current user.",Adobe,"Adobe Acrobat And Reader 2017.012.20098 And Earlier Versions, 2017.011.30066 And Earlier Versions, 2015.006.30355 And Earlier Versions, 11.0.22 And Earlier Versions",9.8,CRITICAL,0.5476199984550476,false,,false,false,false,,,false,false,,2018-05-19T17:00:00.000Z,0 CVE-2017-11253,https://securityvulnerability.io/vulnerability/CVE-2017-11253,,"Adobe Acrobat and Reader versions 2017.012.20098 and earlier, 2017.011.30066 and earlier, 2015.006.30355 and earlier, 11.0.22 and earlier have an exploitable out-of-bounds read vulnerability. Successful exploitation could lead to arbitrary code execution in the context of the current user.",Adobe,"Adobe Acrobat And Reader 2017.012.20098 And Earlier Versions, 2017.011.30066 And Earlier Versions, 2015.006.30355 And Earlier Versions, 11.0.22 And Earlier Versions",9.8,CRITICAL,0.009680000133812428,false,,false,false,false,,,false,false,,2018-05-19T17:00:00.000Z,0 CVE-2017-16388,https://securityvulnerability.io/vulnerability/CVE-2017-16388,,"An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versions, and 11.0.22 and earlier versions. This vulnerability is an instance of a use after free vulnerability in the JavaScript API engine. The mismatch between an old and a new object can provide an attacker with unintended memory access -- potentially leading to code corruption, control-flow hijack, or an information leak attack. Successful exploitation could lead to arbitrary code execution.",Adobe,"Adobe Acrobat Reader 2017.012.20098 And Earlier Versions, 2017.011.30066 And Earlier Versions, 2015.006.30355 And Earlier Versions, 11.0.22 And Earlier Versions",8.8,HIGH,0.00892999954521656,false,,false,false,false,,,false,false,,2017-12-09T06:00:00.000Z,0 CVE-2017-16386,https://securityvulnerability.io/vulnerability/CVE-2017-16386,,"An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versions, and 11.0.22 and earlier versions. This vulnerability occurs as a result of a computation that reads data that is past the end of the target buffer; the computation is part of the XPS2PDF conversion engine. The use of an invalid (out-of-range) pointer offset during access of internal data structure fields causes the vulnerability. A successful attack can lead to sensitive data exposure.",Adobe,"Adobe Acrobat Reader 2017.012.20098 And Earlier Versions, 2017.011.30066 And Earlier Versions, 2015.006.30355 And Earlier Versions, 11.0.22 And Earlier Versions",8.8,HIGH,0.035829998552799225,false,,false,false,false,,,false,false,,2017-12-09T06:00:00.000Z,0 CVE-2017-16369,https://securityvulnerability.io/vulnerability/CVE-2017-16369,,"An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versions, and 11.0.22 and earlier versions. This vulnerability is an instance of a Same Origin Policy security bypass vulnerability, affecting files on the local system, etc.",Adobe,"Adobe Acrobat Reader 2017.012.20098 And Earlier Versions, 2017.011.30066 And Earlier Versions, 2015.006.30355 And Earlier Versions, 11.0.22 And Earlier Versions",6.5,MEDIUM,0.005009999964386225,false,,false,false,false,,,false,false,,2017-12-09T06:00:00.000Z,0 CVE-2017-16409,https://securityvulnerability.io/vulnerability/CVE-2017-16409,,"An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versions, and 11.0.22 and earlier versions. This vulnerability occurs as a result of a computation that reads data that is past the end of the target buffer; the computation is part of the Adobe graphics module responsible for displaying textual data. The use of an invalid (out-of-range) pointer offset during access of internal data structure fields causes the vulnerability. A successful attack can lead to sensitive data exposure.",Adobe,"Adobe Acrobat Reader 2017.012.20098 And Earlier Versions, 2017.011.30066 And Earlier Versions, 2015.006.30355 And Earlier Versions, 11.0.22 And Earlier Versions",8.8,HIGH,0.12650999426841736,false,,false,false,false,,,false,false,,2017-12-09T06:00:00.000Z,0 CVE-2017-16410,https://securityvulnerability.io/vulnerability/CVE-2017-16410,,"An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versions, and 11.0.22 and earlier versions. The vulnerability is a result of untrusted input that is used to calculate an array index; the calculation occurs in the image conversion module, when processing GIF files. The vulnerability leads to an operation that can write to a memory location that is outside of the memory addresses allocated for the data structure. The specific scenario leads to a write access to a memory location that does not belong to the relevant process address space.",Adobe,"Adobe Acrobat Reader 2017.012.20098 And Earlier Versions, 2017.011.30066 And Earlier Versions, 2015.006.30355 And Earlier Versions, 11.0.22 And Earlier Versions",8.8,HIGH,0.004449999891221523,false,,false,false,false,,,false,false,,2017-12-09T06:00:00.000Z,0 CVE-2017-16395,https://securityvulnerability.io/vulnerability/CVE-2017-16395,,"An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versions, and 11.0.22 and earlier versions. The vulnerability is caused by a buffer access with an incorrect length value in the image conversion module when processing Enhanced Metafile Format (EMF). Crafted EMF input (EMR_STRETCHDIBITS) causes a mismatch between allocated buffer size and the access allowed by the computation. If an attacker can adequately control the accessible memory then this vulnerability can be leveraged to achieve arbitrary code execution.",Adobe,"Adobe Acrobat Reader 2017.012.20098 And Earlier Versions, 2017.011.30066 And Earlier Versions, 2015.006.30355 And Earlier Versions, 11.0.22 And Earlier Versions",8.8,HIGH,0.1286800056695938,false,,false,false,false,,,false,false,,2017-12-09T06:00:00.000Z,0 CVE-2017-16404,https://securityvulnerability.io/vulnerability/CVE-2017-16404,,"An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versions, and 11.0.22 and earlier versions. The vulnerability is caused by a computation that writes data past the end of the intended buffer; the computation is part of processing Enhanced Metafile Format Plus (EMF+). The vulnerability is a result of an out of range pointer offset that is used to access sub-elements of an internal data structure. An attacker can potentially leverage the vulnerability to corrupt sensitive data or execute arbitrary code.",Adobe,"Adobe Acrobat Reader 2017.012.20098 And Earlier Versions, 2017.011.30066 And Earlier Versions, 2015.006.30355 And Earlier Versions, 11.0.22 And Earlier Versions",8.8,HIGH,0.02703999914228916,false,,false,false,false,,,false,false,,2017-12-09T06:00:00.000Z,0 CVE-2017-16360,https://securityvulnerability.io/vulnerability/CVE-2017-16360,,"An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versions, and 11.0.22 and earlier versions. This vulnerability is an instance of a use after free vulnerability in the MakeAccessible plugin, when creating an internal data structure. The mismatch between an old and a new object can provide an attacker with unintended memory access -- potentially leading to code corruption, control-flow hijack, or an information leak attack. Successful exploitation could lead to arbitrary code execution.",Adobe,"Adobe Acrobat Reader 2017.012.20098 And Earlier Versions, 2017.011.30066 And Earlier Versions, 2015.006.30355 And Earlier Versions, 11.0.22 And Earlier Versions",8.8,HIGH,0.00892999954521656,false,,false,false,false,,,false,false,,2017-12-09T06:00:00.000Z,0 CVE-2017-16398,https://securityvulnerability.io/vulnerability/CVE-2017-16398,,"An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versions, and 11.0.22 and earlier versions. This vulnerability is an instance of a use after free vulnerability in the JavaScript engine. The mismatch between an old and a new object can provide an attacker with unintended memory access -- potentially leading to code corruption, control-flow hijack, or an information leak attack. Successful exploitation could lead to arbitrary code execution.",Adobe,"Adobe Acrobat Reader 2017.012.20098 And Earlier Versions, 2017.011.30066 And Earlier Versions, 2015.006.30355 And Earlier Versions, 11.0.22 And Earlier Versions",9.8,CRITICAL,0.009109999984502792,false,,false,false,false,,,false,false,,2017-12-09T06:00:00.000Z,0 CVE-2017-16376,https://securityvulnerability.io/vulnerability/CVE-2017-16376,,"An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versions, and 11.0.22 and earlier versions. This vulnerability occurs as a result of a computation that reads data that is past the end of the target buffer; the computation is a part of the MakeAccessible plugin. The use of an invalid (out-of-range) pointer offset during access of internal data structure fields causes the vulnerability. A successful attack can lead to sensitive data exposure.",Adobe,"Adobe Acrobat Reader 2017.012.20098 And Earlier Versions, 2017.011.30066 And Earlier Versions, 2015.006.30355 And Earlier Versions, 11.0.22 And Earlier Versions",8.8,HIGH,0.007360000163316727,false,,false,false,false,,,false,false,,2017-12-09T06:00:00.000Z,0 CVE-2017-16373,https://securityvulnerability.io/vulnerability/CVE-2017-16373,,"An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versions, and 11.0.22 and earlier versions. This issue is due to an untrusted pointer dereference. In this scenario, the input is crafted in way that the computation results in pointers to memory locations that do not belong to the relevant process address space. The dereferencing operation is a read operation, and an attack can result in sensitive data exposure.",Adobe,"Adobe Acrobat Reader 2017.012.20098 And Earlier Versions, 2017.011.30066 And Earlier Versions, 2015.006.30355 And Earlier Versions, 11.0.22 And Earlier Versions",8.8,HIGH,0.006020000204443932,false,,false,false,false,,,false,false,,2017-12-09T06:00:00.000Z,0 CVE-2017-16391,https://securityvulnerability.io/vulnerability/CVE-2017-16391,,"An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versions, and 11.0.22 and earlier versions. The vulnerability is a result of untrusted input that is used to calculate an array index; the calculation occurs in the printing functionality. The vulnerability leads to an operation that can write to a memory location that is outside of the memory addresses allocated for the data structure. The specific scenario leads to a write access to a memory location that does not belong to the relevant process address space.",Adobe,"Adobe Acrobat Reader 2017.012.20098 And Earlier Versions, 2017.011.30066 And Earlier Versions, 2015.006.30355 And Earlier Versions, 11.0.22 And Earlier Versions",8.8,HIGH,0.0982000008225441,false,,false,false,false,,,false,false,,2017-12-09T06:00:00.000Z,0 CVE-2017-16402,https://securityvulnerability.io/vulnerability/CVE-2017-16402,,"An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versions, and 11.0.22 and earlier versions. This vulnerability occurs as a result of a computation that reads data that is past the end of the target buffer; the computation is a part of the JPEG 2000 module. The use of an invalid (out-of-range) pointer offset during access of internal data structure fields causes the vulnerability. A successful attack can lead to sensitive data exposure.",Adobe,"Adobe Acrobat Reader 2017.012.20098 And Earlier Versions, 2017.011.30066 And Earlier Versions, 2015.006.30355 And Earlier Versions, 11.0.22 And Earlier Versions",8.8,HIGH,0.12650999426841736,false,,false,false,false,,,false,false,,2017-12-09T06:00:00.000Z,0 CVE-2017-16406,https://securityvulnerability.io/vulnerability/CVE-2017-16406,,"An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versions, and 11.0.22 and earlier versions. This vulnerability is an instance of a type confusion vulnerability in the EMF processing module. The issue causes the program to access an object using an incompatible type, leading to an out of bounds memory access. Attackers can exploit the vulnerability by using the out of bounds access for unintended reads, writes, or frees -- potentially leading to code corruption, control-flow hijack, or information leak attack.",Adobe,"Adobe Acrobat Reader 2017.012.20098 And Earlier Versions, 2017.011.30066 And Earlier Versions, 2015.006.30355 And Earlier Versions, 11.0.22 And Earlier Versions",8.8,HIGH,0.0734499990940094,false,,false,false,false,,,false,false,,2017-12-09T06:00:00.000Z,0 CVE-2017-16408,https://securityvulnerability.io/vulnerability/CVE-2017-16408,,"An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versions, and 11.0.22 and earlier versions. This vulnerability occurs as a result of a computation that reads data that is past the end of the target buffer; the computation is a part of the WebCapture module. The use of an invalid (out-of-range) pointer offset during access of internal data structure fields causes the vulnerability. A successful attack can lead to sensitive data exposure.",Adobe,"Adobe Acrobat Reader 2017.012.20098 And Earlier Versions, 2017.011.30066 And Earlier Versions, 2015.006.30355 And Earlier Versions, 11.0.22 And Earlier Versions",8.8,HIGH,0.008419999852776527,false,,false,false,false,,,false,false,,2017-12-09T06:00:00.000Z,0 CVE-2017-16413,https://securityvulnerability.io/vulnerability/CVE-2017-16413,,"An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versions, and 11.0.22 and earlier versions. The vulnerability is caused by a computation that writes data past the end of the intended buffer; the computation is part of the XPS to PDF conversion module, when processing TIFF files. The vulnerability is a result of an out of range pointer offset that is used to access sub-elements of an internal data structure. An attacker can potentially leverage the vulnerability to corrupt sensitive data or execute arbitrary code.",Adobe,"Adobe Acrobat Reader 2017.012.20098 And Earlier Versions, 2017.011.30066 And Earlier Versions, 2015.006.30355 And Earlier Versions, 11.0.22 And Earlier Versions",8.8,HIGH,0.022339999675750732,false,,false,false,false,,,false,false,,2017-12-09T06:00:00.000Z,0 CVE-2017-16420,https://securityvulnerability.io/vulnerability/CVE-2017-16420,,"An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versions, and 11.0.22 and earlier versions. This vulnerability occurs as a result of a computation that reads data that is past the end of the target buffer; the computation is in the part of the JavaScript engine that handles annotation abstraction. The use of an invalid (out-of-range) pointer offset during access of internal data structure fields causes the vulnerability. A successful attack can lead to sensitive data exposure.",Adobe,"Adobe Acrobat Reader 2017.012.20098 And Earlier Versions, 2017.011.30066 And Earlier Versions, 2015.006.30355 And Earlier Versions, 11.0.22 And Earlier Versions",8.8,HIGH,0.007360000163316727,false,,false,false,false,,,false,false,,2017-12-09T06:00:00.000Z,0 CVE-2017-16372,https://securityvulnerability.io/vulnerability/CVE-2017-16372,,"An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versions, and 11.0.22 and earlier versions. This issue is due to untrusted pointer dereference in the JavaScript API engine. In this scenario, the JavaScript input is crafted in way that the computation results with pointer to memory locations that do not belong to the relevant process address space. The dereferencing operation is a read operation, and an attack can result with sensitive data exposure.",Adobe,"Adobe Acrobat Reader 2017.012.20098 And Earlier Versions, 2017.011.30066 And Earlier Versions, 2015.006.30355 And Earlier Versions, 11.0.22 And Earlier Versions",8.8,HIGH,0.006020000204443932,false,,false,false,false,,,false,false,,2017-12-09T06:00:00.000Z,0 CVE-2017-16371,https://securityvulnerability.io/vulnerability/CVE-2017-16371,,"An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versions, and 11.0.22 and earlier versions. This issue is due to an untrusted pointer dereference in the JavaScript engine. In this scenario, the input is crafted in a way that the computation results in pointers to memory locations that do not belong to the relevant process address space. The dereferencing operation is a read operation, and an attack can result in sensitive data exposure.",Adobe,"Adobe Acrobat Reader 2017.012.20098 And Earlier Versions, 2017.011.30066 And Earlier Versions, 2015.006.30355 And Earlier Versions, 11.0.22 And Earlier Versions",8.8,HIGH,0.006020000204443932,false,,false,false,false,,,false,false,,2017-12-09T06:00:00.000Z,0