Product of Adobe

Acrobat and Reader

As of , 13 Adobe Acrobat and Reader vulnerabilities are on CISA's list of exploited vulnerabilities, 1 of them used in ransomware campaigns; 2 were added in 2026. Patch first: CVE-2009-3459.

Patch first

Patch first
#VulnerabilityProductOur groupListedDeadlineEPSS
1CVE-2009-3459Heap-Based Buffer OverflowAdobe Acrobat and ReaderPatch this weekMetasploit module; EPSS 0.87; verified Exploit-DB entry0.87
2CVE-2007-5659Buffer OverflowAdobe Acrobat and ReaderPatch this weekMetasploit module; EPSS 0.87; verified Exploit-DB entry0.87
3CVE-2009-3953Universal 3D Remote Code ExecutionAdobe Acrobat and ReaderPatch this weekMetasploit module; EPSS 0.83; verified Exploit-DB entry0.83
4CVE-2009-4324Use-After-FreeAdobe Acrobat and ReaderPatch this weekMetasploit module; EPSS 0.82; verified Exploit-DB entry0.82
5CVE-2010-2883Stack-Based Buffer OverflowAdobe Acrobat and ReaderPatch this weekMetasploit module; EPSS 0.81; verified Exploit-DB entry0.81
6CVE-2008-2992Reader and Acrobat Input ValidationAdobe Acrobat and ReaderPatch this weekRansomware use; Metasploit module; EPSS 0.98; verified Exploit-DB entry0.98
7CVE-2023-21608Use-After-FreeAdobe Acrobat and ReaderPatch this weekEPSS 0.610.61
8CVE-2021-21017Heap-based Buffer OverflowAdobe Acrobat and ReaderPatch this weekEPSS 0.860.86
9CVE-2021-28550Use-After-FreeAdobe Acrobat and ReaderPatch this weekEPSS 0.520.52
10CVE-2008-0655UnspecifiedAdobe Acrobat and ReaderPatch soon0.38
11CVE-2018-4990Double FreeAdobe Acrobat and ReaderPatch soon0.36
12CVE-2023-26369Out-of-Bounds WriteAdobe Acrobat and ReaderPatch soon0.07
13CVE-2026-34621Prototype PollutionAdobe Acrobat and ReaderPatch soon0.02

Added each year

24682021: 2220212022: 7720222023: 2220232024: nonenone20242025: nonenone20252026: 222026
Entries CISA added each year, removed ones included. Source: CISA KEV.
Show the numbers
Periodentries added
20212
20227
20232
2024none
2025none
20262

Used in ransomware

Changes CISA made to these entries

  1. CVE-2008-2992 Adobe Acrobat and ReaderRansomware use: Unknown to Known.

Every change we recorded