Product of Adobe
Reader and Acrobat
As of , 8 Adobe Reader and Acrobat vulnerabilities are on CISA's list of exploited vulnerabilities, 1 of them used in ransomware campaigns; 0 were added in 2026. Patch first: CVE-2011-2462.
Patch first
| # | Vulnerability | Product | Our group | Listed | Deadline | EPSS |
|---|---|---|---|---|---|---|
| 1 | CVE-2011-2462Universal 3D Memory Corruption | Adobe Reader and Acrobat | Patch this weekMetasploit module; EPSS 0.89; verified Exploit-DB entry | 0.89 | ||
| 2 | CVE-2009-0927Reader and Adobe Acrobat Stack-Based Buffer Overflow | Adobe Reader and Acrobat | Patch this weekMetasploit module; EPSS 0.97; verified Exploit-DB entry | 0.97 | ||
| 3 | CVE-2010-0188Arbitrary Code Execution | Adobe Reader and Acrobat | Patch this weekRansomware use; Metasploit module; EPSS 0.88; verified Exploit-DB entry | 0.88 | ||
| 4 | CVE-2013-3346Memory Corruption | Adobe Reader and Acrobat | Patch this weekMetasploit module; EPSS 0.79; verified Exploit-DB entry | 0.79 | ||
| 5 | CVE-2013-0640Memory Corruption | Adobe Reader and Acrobat | Patch this weekEPSS 0.87; verified Exploit-DB entry | 0.87 | ||
| 6 | CVE-2013-2729Arbitrary Integer Overflow | Adobe Reader and Acrobat | Patch this weekEPSS 0.67 | 0.67 | ||
| 7 | CVE-2014-0496Use-After-Free | Adobe Reader and Acrobat | Patch soon | 0.40 | ||
| 8 | CVE-2014-0546Sandbox Bypass | Adobe Reader and Acrobat | Patch soon | 0.22 |
Added each year
Show the numbers
| Period | entries added |
|---|---|
| 2022 | 8 |
| 2023 | none |
| 2024 | none |
| 2025 | none |
| 2026 | none |
Used in ransomware
Changes CISA made to these entries
- CVE-2014-0546 Adobe Reader and AcrobatRenamed from Acrobat and Reader to Reader and Acrobat. Edited: description and name.
- CVE-2011-2462 Adobe Reader and AcrobatRenamed from Acrobat and Reader to Reader and Acrobat. Edited: description and name.