Windows apps · Application version · May 12, 2024

Adobe Acrobat Reader DC 24.002.20759

Adobe Acrobat Reader DC 24.002.20759, released May 12, 2024, fixes 14 CVEs in Adobe Acrobat Reader DC. None of them is reported as exploited. Patch Radar priority: High. The latest Adobe Acrobat Reader DC is 26.002.22031, which also fixes every one of these CVEs.

High

Superseded. The latest Adobe Acrobat Reader DC is 26.002.22031, which also fixes every CVE on this page. Install that instead.

CVEs closed

None rated Critical

Exploited

None reported

Highest CVSS

7.8

Base score, 0 to 10

Highest EPSS

0.0665

93rd percentile

Priority of the 14 CVEs

Patch now 0
                                Urgent 0
                                High 11
                                Routine 3

Applies to

Product	Version
Adobe Acrobat Reader DC	24.002.20759

CVEs this fix closes

Priority	CVE	Title	CVSS	EPSS	Exploitation
High	CVE-2024-30280	ZDI-CAN-22867: Adobe Acrobat Pro DC AcroForm Annotation Out-Of-Bounds Read Remote Code Execution Vulnerability	7.8	0.0665	None reported
High	CVE-2024-30279	ZDI-CAN-22887: Adobe Acrobat Reader DC JPEG2000 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability	7.8	0.0593	None reported
High	CVE-2024-30284	ZDI-CAN-23466: Adobe Acrobat Reader DC Annotation Use-After-Free Remote Code Execution Vulnerability	7.8	0.0426	None reported
High	CVE-2024-30310	ZDI-CAN-23327: Adobe Acrobat Reader DC PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability	7.8	0.0281	None reported
High	CVE-2024-34094	ZDI-CAN-23474: Adobe Acrobat Reader DC Annotation Use-After-Free Remote Code Execution Vulnerability	7.8	0.0063	None reported
High	CVE-2024-34095	ZDI-CAN-23475: Adobe Acrobat Reader DC Annotation Use-After-Free Remote Code Execution Vulnerability	7.8	0.0060	None reported
High	CVE-2024-34096	ZDI-CAN-23472: Adobe Acrobat Reader DC Annotation Use-After-Free Remote Code Execution Vulnerability	7.8	0.0060	None reported
High	CVE-2024-34097	ZDI-CAN-23473: Adobe Acrobat Reader DC Annotation Use-After-Free Remote Code Execution Vulnerability	7.8	0.0060	None reported
High	CVE-2024-34100	Use-After-Free vulnerability in the latest Adobe Acrobat Reader DC when open malicious PDF file	7.8	0.0042	None reported
High	CVE-2024-34099	ZDI-CAN-XXXX: [Pwn2Own] Acrobat sandbox bypass part 2 of 2	7.8	0.0036	None reported
High	CVE-2024-34098	ZDI-CAN-XXXX: [Pwn2Own] Acrobat sandbox bypass part 1 of 2	7.8	0.0035	None reported
Routine	CVE-2024-30311	TALOS-2024-1946 - Adobe Acrobat Reader Font gvar GlyphVariationData out-of-bounds read vulnerability	5.5	0.0199	None reported
Routine	CVE-2024-30312	TALOS-2024-1952 - Adobe Acrobat Reader Font CPAL numColorRecords out-of-bounds read vulnerability	5.5	0.0177	None reported
Routine	CVE-2024-34101	ZDI-CAN-23614: Adobe Acrobat Reader DC PDF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability	5.5	0.0046	None reported

For tools and AI agents

This page as data: JSON · Markdown

Link to this page

If this page saved you time, a link to it in your ticket, advisory or write-up helps others find it.

HTML

<a href="https://patchblox.com/security/fix/windows-app/adobe.acrobat.reader.32-bit-24.002.20759">Adobe Acrobat Reader DC 24.002.20759 on Patchblox Patch Radar</a>

Reusing the data? How to credit Patch Radar.

Is it current everywhere?

Patchblox finds every install below the fixed version, including per-user copies, and updates them from a signed catalog package.

Get a demo

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.