Acrobat Dc vulnerabilitiesAnd the versions its exploited flaws hit.
Acrobat Dc is made by Adobe. We track 1,761 published vulnerabilities in it, across 235 versions. 6 of them are on the list of flaws known to be exploited, the newest added on 13 April 2026. If you run Acrobat Dc, check your version against the exploited flaws below and patch those first.
The most recent Acrobat Dc flaw added to the known-exploited list is CVE-2020-9715, on 13 April 2026. We keep watching the known-exploited list.
Which versions of Acrobat Dc do the exploited flaws hit?
Each exploited flaw lists the versions it affects, usually as ranges. "15.007.20033 to before 23.006.20320" means from 15.007.20033 up to, but not including, 23.006.20320. Find your version, then patch.
- CVE-2020-9715Exploited list, 13 Apr 2026
Adobe Acrobat Use-After-Free Vulnerability
15.006.30060 to 15.006.3052315.008.20082 to 20.009.20074 - CVE-2023-21608Exploited list, 10 Oct 2023
Adobe Acrobat and Reader Use-After-Free Vulnerability
15.008.20082 to 22.003.20282 - CVE-2023-26369Exploited list, 14 Sep 2023
Adobe Acrobat and Reader Out-of-Bounds Write Vulnerability
15.007.20033 to before 23.006.20320 - CVE-2018-4990Exploited list, 8 Jun 2022
Adobe Acrobat and Reader Double Free Vulnerability
15.006.30060 to 15.006.3041715.008.20082 to 18.011.20038 - CVE-2021-21017Exploited list, 3 Nov 2021
Adobe Acrobat and Reader Heap-based Buffer Overflow Vulnerability
up to 20.013.20074 - CVE-2021-28550Exploited list, 3 Nov 2021
Adobe Acrobat and Reader Use-After-Free Vulnerability
15.008.20082 to 21.001.20150
Which Acrobat Dc vulnerabilities are being exploited?
6 flaws are on the government list of vulnerabilities known to be exploited. These are the ones criminals are using now, so they go first, whatever their severity score says.
- 7.8Adobe Acrobat Use-After-Free Vulnerability
Adobe Acrobat contains a use-after-free vulnerability that allows for code execution
- 7.8Adobe Acrobat and Reader Use-After-Free Vulnerability
Adobe Acrobat and Reader contains a use-after-free vulnerability that allows for code execution in the context of the current user.
- 7.8Adobe Acrobat and Reader Out-of-Bounds Write Vulnerability
Adobe Acrobat and Reader contains an out-of-bounds write vulnerability that allows for code execution.
- 8.8Adobe Acrobat and Reader Double Free Vulnerability
Adobe Acrobat and Reader have a double free vulnerability that could lead to remote code execution.
- 8.8Adobe Acrobat and Reader Heap-based Buffer Overflow Vulnerability
Acrobat Acrobat and Reader contain a heap-based buffer overflow vulnerability that could allow an unauthenticated attacker to achieve code execution in the context of the current user.
- 8.8Adobe Acrobat and Reader Use-After-Free Vulnerability
Adobe Acrobat and Reader contains a use-after-free vulnerability that could allow an unauthenticated attacker to achieve code execution in the context of the current user.
Which Acrobat Dc flaws are most likely to be used?
Ranked by the latest exploit-likelihood forecast: the chance each flaw is used in an attack in the next 30 days. A high severity score on its own doesn't tell you that. Flaws shared by many other makers' products are left out.
- 87%CVE-2018-4993High
Adobe Acrobat and Reader versions 2018.011.20038 and earlier, 2017.011.30079 and earlier, and 2015.006.30417 and earlier have an NTLM SSO hash theft vulnerability.
- 82%CVE-2018-16042Medium
Adobe Acrobat and Reader versions 2019.008.20081 and earlier, 2019.008.20080 and earlier, 2019.008.20081 and earlier, 2017.011.30106 and earlier version, 2017.011.30105 and earlier version, 2015.006.30457 and...
- 43%CVE-2018-4904High
An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 and earlier versions.
- 36%CVE-2018-4985High
Adobe Acrobat and Reader versions 2018.011.20038 and earlier, 2017.011.30079 and earlier, and 2015.006.30417 and earlier have an Out-of-bounds read vulnerability.
- 36%
Adobe Acrobat and Reader versions 2018.011.20038 and earlier, 2017.011.30079 and earlier, and 2015.006.30417 and earlier have a Double Free vulnerability.
- 35%CVE-2018-12848Critical
Adobe Acrobat and Reader versions 2018.011.20058 and earlier, 2017.011.30099 and earlier, and 2015.006.30448 and earlier have an out-of-bounds write vulnerability.
- 35%CVE-2019-16451Critical
Adobe Acrobat and Reader versions , 2019.021.20056 and earlier, 2017.011.30152 and earlier, 2017.011.30155 and earlier version, 2017.011.30152 and earlier, and 2015.006.30505 and earlier have a heap overflow...
- 34%CVE-2018-12849High
Adobe Acrobat and Reader versions 2018.011.20058 and earlier, 2017.011.30099 and earlier, and 2015.006.30448 and earlier have an out-of-bounds read vulnerability.
- 34%CVE-2018-12850High
Adobe Acrobat and Reader versions 2018.011.20058 and earlier, 2017.011.30099 and earlier, and 2015.006.30448 and earlier have an out-of-bounds read vulnerability.
- 33%CVE-2018-4949High
Adobe Acrobat and Reader versions 2018.011.20038 and earlier, 2017.011.30079 and earlier, and 2015.006.30417 and earlier have an Out-of-bounds read vulnerability.
Running Acrobat Dc? We'll keep checking.
Looking flaws up one at a time doesn't scale. Tell us what you run once, and we tell you which flaws matter to you, in what order, and keep watching for new ones.
- Tell us what you runPick your software from a list, or let us work it out from your website.
- We match it to every flawOver 400,000 published flaws, checked against your list.
- Ranked by real-world riskA 0 to 100 score, led by evidence criminals are using it.
- Told as soon as we knowAn alert by email, in the app or by webhook to your own tools.
Free plan, no card needed. Nothing to install.
1 flaw being exploited affects software Acme tracks
Adobe Acrobat contains a use-after-free vulnerability that allows for code execution
- Matched to
- Acrobat Dc on Acme's software list
- What to do
- Patch first, then check for signs of use
Sent to the alert recipients Acme chose. Also in the app and to Acme's webhook.
We track 1,761 published vulnerabilities listed under the name Acrobat Dc, across 235 versions. The most recent Acrobat Dc flaw added to the known-exploited list is CVE-2020-9715, on 13 April 2026.
6 are on the list of flaws known to be exploited. The most recently added are CVE-2020-9715, CVE-2023-21608 and CVE-2023-26369.
Each flaw names its own versions, usually as ranges. The newest, CVE-2020-9715, affects 15.006.30060 to 15.006.30523, 15.008.20082 to 20.009.20074. The versions for every exploited flaw are listed on this page.
Create a Precursor Intelligence account and track Acrobat Dc. We match it against every published flaw, give each one a risk score from 0 to 100 and keep watching, so you hear about new ones as soon as we know, by email, in the app or by webhook.