Adobe Acrobat Reader DC 22.003.20310
Adobe Acrobat Reader DC 22.003.20310, released December 24, 2022, fixes 18 CVEs in Adobe Acrobat Reader DC. One of them is being exploited (CVE-2023-21608); 1 on CISA KEV. Patch Radar priority: Patch now. The latest Adobe Acrobat Reader DC is 26.002.22031, which also fixes every one of these CVEs.
Superseded. The latest Adobe Acrobat Reader DC is 26.002.22031, which also fixes every CVE on this page. Install that instead.
Priority of the 18 CVEs
Applies to
| Product | Version |
|---|---|
| Adobe Acrobat Reader DC | 22.003.20310 |
CVEs this fix closes
| Priority | CVE | Title | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|
| Patch now | CVE-2023-21608 | Adobe Acrobat and Reader Use-After-Free Vulnerability | 7.8 | 0.5943 | KEVExploited |
| High | CVE-2023-21579 | Adobe Acrobat Reader DC Font Parsing Integer Overflow Remote Code Execution Vulnerability | 7.8 | 0.0495 | None reported |
| High | CVE-2023-21607 | Adobe Acrobat Reader Improper Input Validation Remote Code Execution Vulnerability | 7.8 | 0.0466 | None reported |
| High | CVE-2023-21605 | Adobe Acrobat Reader DC Font Parsing Heap-based Buffer Overflow Arbitrary code execution | 7.8 | 0.0257 | None reported |
| High | CVE-2023-21604 | Adobe Acrobat Reader Stack-based Buffer Overflow Arbitrary code execution | 7.8 | 0.0257 | None reported |
| High | CVE-2023-21610 | Adobe Acrobat Reader Stack-based Buffer Overflow Arbitrary code execution | 7.8 | 0.0254 | None reported |
| High | CVE-2023-21606 | Adobe Acrobat Reader DC Font Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability | 7.8 | 0.0247 | None reported |
| High | CVE-2023-21609 | Adobe Acrobat Reader DC AcroForm Annotation Out-Of-Bounds Write Remote Code Execution Vulnerability | 7.8 | 0.0210 | None reported |
| High | CVE-2023-22242 | ZDI-CAN-19515: Adobe Acrobat Reader DC AcroForm Annotation Out-Of-Bounds Write Remote Code Execution Vulnerability | 7.8 | 0.0053 | None reported |
| High | CVE-2023-21611 | Adobe Acrobat Reader Creation of Temporary File in Directory with Incorrect Permissions Privilege escalation | 7.8 | 0.0041 | None reported |
| High | CVE-2023-21612 | Adobe Acrobat Reader Creation of Temporary File in Directory with Incorrect Permissions Privilege escalation | 7.8 | 0.0040 | None reported |
| High | CVE-2023-22240 | ZDI-CAN-19517: Adobe Acrobat Reader DC AcroForm Annotation Out-Of-Bounds Write Remote Code Execution Vulnerability | 7.8 | 0.0037 | None reported |
| High | CVE-2023-22241 | ZDI-CAN-19516: Adobe Acrobat Reader DC AcroForm Annotation Out-Of-Bounds Write Remote Code Execution Vulnerability | 7.8 | 0.0037 | None reported |
| Routine | CVE-2023-21585 | Adobe Acrobat Reader DC Font Parsing Out-Of-Bounds Read Information Disclosure Vulnerability | 5.5 | 0.0247 | None reported |
| Routine | CVE-2023-21613 | Adobe Acrobat Reader DC Font Parsing Out-Of-Bounds Read Information Disclosure Vulnerability | 5.5 | 0.0247 | None reported |
| Routine | CVE-2023-21614 | Adobe Acrobat Reader DC Font Parsing Out-Of-Bounds Read Information Disclosure Vulnerability | 5.5 | 0.0247 | None reported |
| Routine | CVE-2023-21581 | Adobe Acrobat Reader DC Font Parsing Out-Of-Bounds Read Information Disclosure Vulnerability | 5.5 | 0.0239 | None reported |
| Routine | CVE-2023-21586 | Acrobat Reader | NULL Pointer Dereference (CWE-476) | 5.5 | 0.0221 | None reported |
Patch Radar data is free to use with attribution. Terms and how to credit it.
Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.