Security feed

24 October 2026

advisoryCISA Known Exploited Vulnerabilities24 Oct 2026

Adobe Acrobat and Reader Use-After-Free Vulnerability

Adobe Acrobat and Reader contains a use-after-free vulnerability that could allow an unauthenticated attacker to achieve code execution in the context of the current user. CISA required action: Apply updates per vendor instructions.

Acrobat and Reader CVE-2021-28550

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: kev:CVE-2021-28550

Acrobat and Reader

Source reference: /product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Related CVEs: CVE-2021-28550
Source reference: /cveID

Publisher severity

No explicit severity was provided.

Event: #2974 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 21:27:00 GMT
Publisher date: Wed, 03 Nov 2021 00:00:00 GMT

Read the original announcement

advisoryCISA Known Exploited Vulnerabilities24 Oct 2026

Adobe Acrobat and Reader Heap-based Buffer Overflow Vulnerability

Acrobat Acrobat and Reader contain a heap-based buffer overflow vulnerability that could allow an unauthenticated attacker to achieve code execution in the context of the current user. CISA required action: Apply updates per vendor instructions.

Acrobat and Reader CVE-2021-21017

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: kev:CVE-2021-21017

Acrobat and Reader

Source reference: /product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Related CVEs: CVE-2021-21017
Source reference: /cveID

Publisher severity

No explicit severity was provided.

Event: #2973 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 21:26:59 GMT
Publisher date: Wed, 03 Nov 2021 00:00:00 GMT

Read the original announcement

advisoryCISA Known Exploited Vulnerabilities24 Oct 2026

Adobe Reader and Acrobat Input Validation Vulnerability

Adobe Acrobat and Reader contain an input validation issue in a JavaScript method that could potentially lead to remote code execution. CISA required action: Apply updates per vendor instructions.

Acrobat and Reader CVE-2008-2992

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: kev:CVE-2008-2992

Acrobat and Reader

Source reference: /product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Related CVEs: CVE-2008-2992
Source reference: /cveID

Publisher severity

No explicit severity was provided.

Event: #2869 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 21:25:56 GMT
Publisher date: Thu, 03 Mar 2022 00:00:00 GMT

Read the original announcement

advisoryCISA Known Exploited Vulnerabilities24 Oct 2026

Adobe Acrobat and Reader Buffer Overflow Vulnerability

Adobe Acrobat and Reader contain a buffer overflow vulnerability that allows remote attackers to execute code via a PDF file with long arguments to unspecified JavaScript methods. CISA required action: Apply updates per vendor instructions.

Acrobat and Reader CVE-2007-5659

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: kev:CVE-2007-5659

Acrobat and Reader

Source reference: /product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Related CVEs: CVE-2007-5659
Source reference: /cveID

Publisher severity

No explicit severity was provided.

Event: #2517 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 21:19:56 GMT
Publisher date: Wed, 08 Jun 2022 00:00:00 GMT

Read the original announcement

advisoryCISA Known Exploited Vulnerabilities24 Oct 2026

Adobe Acrobat and Reader Unspecified Vulnerability

Adobe Acrobat and Reader contains an unespecified vulnerability described as a design flaw which could allow a specially crafted file to be printed silently an arbitrary number of times. CISA required action: Apply updates per vendor instructions.

Acrobat and Reader CVE-2008-0655

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: kev:CVE-2008-0655

Acrobat and Reader

Source reference: /product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Related CVEs: CVE-2008-0655
Source reference: /cveID

Publisher severity

No explicit severity was provided.

Event: #2515 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 21:19:55 GMT
Publisher date: Wed, 08 Jun 2022 00:00:00 GMT

Read the original announcement

advisoryCISA Known Exploited Vulnerabilities24 Oct 2026

Adobe Acrobat and Reader Universal 3D Remote Code Execution Vulnerability

Adobe Acrobat and Reader contains an array boundary issue in Universal 3D (U3D) support that could lead to remote code execution. CISA required action: Apply updates per vendor instructions.

Acrobat and Reader CVE-2009-3953

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: kev:CVE-2009-3953

Acrobat and Reader

Source reference: /product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Related CVEs: CVE-2009-3953
Source reference: /cveID

Publisher severity

No explicit severity was provided.

Event: #2511 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 21:19:52 GMT
Publisher date: Wed, 08 Jun 2022 00:00:00 GMT

Read the original announcement

advisoryCISA Known Exploited Vulnerabilities24 Oct 2026

Adobe Acrobat and Reader Use-After-Free Vulnerability

Use-after-free vulnerability in Adobe Acrobat and Reader allows remote attackers to execute code via a crafted PDF file. CISA required action: Apply updates per vendor instructions.

Acrobat and Reader CVE-2009-4324

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: kev:CVE-2009-4324

Acrobat and Reader

Source reference: /product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Related CVEs: CVE-2009-4324
Source reference: /cveID

Publisher severity

No explicit severity was provided.

Event: #2510 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 21:19:52 GMT
Publisher date: Wed, 08 Jun 2022 00:00:00 GMT

Read the original announcement

advisoryCISA Known Exploited Vulnerabilities24 Oct 2026

Adobe Acrobat and Reader Stack-Based Buffer Overflow Vulnerability

Adobe Acrobat and Reader contain a stack-based buffer overflow vulnerability that allows remote attackers to execute code or cause denial-of-service (DoS). CISA required action: Apply updates per vendor instructions.

Acrobat and Reader CVE-2010-2883

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: kev:CVE-2010-2883

Acrobat and Reader

Source reference: /product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Related CVEs: CVE-2010-2883
Source reference: /cveID

Publisher severity

No explicit severity was provided.

Event: #2506 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 21:19:49 GMT
Publisher date: Wed, 08 Jun 2022 00:00:00 GMT

Read the original announcement

advisoryCISA Known Exploited Vulnerabilities24 Oct 2026

Adobe Acrobat and Reader Double Free Vulnerability

Adobe Acrobat and Reader have a double free vulnerability that could lead to remote code execution. CISA required action: Apply updates per vendor instructions.

Acrobat and Reader CVE-2018-4990

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: kev:CVE-2018-4990

Acrobat and Reader

Source reference: /product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Related CVEs: CVE-2018-4990
Source reference: /cveID

Publisher severity

No explicit severity was provided.

Event: #1490 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 21:03:07 GMT
Publisher date: Wed, 08 Jun 2022 00:00:00 GMT

Read the original announcement

advisoryCISA Known Exploited Vulnerabilities24 Oct 2026

Adobe Acrobat and Reader Out-of-Bounds Write Vulnerability

Adobe Acrobat and Reader contains an out-of-bounds write vulnerability that allows for code execution. CISA required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Acrobat and Reader CVE-2023-26369

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: kev:CVE-2023-26369

Acrobat and Reader

Source reference: /product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Related CVEs: CVE-2023-26369
Source reference: /cveID

Publisher severity

No explicit severity was provided.

Event: #1262 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 20:58:58 GMT
Publisher date: Thu, 14 Sep 2023 00:00:00 GMT

Read the original announcement

advisoryCISA Known Exploited Vulnerabilities24 Oct 2026

Adobe Acrobat and Reader Use-After-Free Vulnerability

Adobe Acrobat and Reader contains a use-after-free vulnerability that allows for code execution in the context of the current user. CISA required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Acrobat and Reader CVE-2023-21608

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: kev:CVE-2023-21608

Acrobat and Reader

Source reference: /product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Related CVEs: CVE-2023-21608
Source reference: /cveID

Publisher severity

No explicit severity was provided.

Event: #1239 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 20:58:44 GMT
Publisher date: Tue, 10 Oct 2023 00:00:00 GMT

Read the original announcement

advisoryCISA Known Exploited Vulnerabilities24 Oct 2026

Adobe Acrobat and Reader Prototype Pollution Vulnerability

Adobe Acrobat and Reader contain a prototype pollution vulnerability that allows for arbitrary code execution. CISA required action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

Acrobat and Reader CVE-2026-34621

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: kev:CVE-2026-34621

Acrobat and Reader

Source reference: /product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Related CVEs: CVE-2026-34621
Source reference: /cveID

Publisher severity

No explicit severity was provided.

Event: #197 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 20:42:12 GMT
Publisher date: Mon, 13 Apr 2026 00:00:00 GMT

Read the original announcement

advisoryCISA Known Exploited Vulnerabilities24 Oct 2026

Adobe Acrobat and Reader Heap-Based Buffer Overflow Vulnerability

Adobe Acrobat and Reader contain a heap-based buffer overflow vulnerability which could allow remote attackers to execute arbitrary code via a crafted PDF file that triggers memory corruption. CISA required action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

Acrobat and Reader CVE-2009-3459

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: kev:CVE-2009-3459

Acrobat and Reader

Source reference: /product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Related CVEs: CVE-2009-3459
Source reference: /cveID

Publisher severity

No explicit severity was provided.

Event: #160 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 20:41:48 GMT
Publisher date: Wed, 20 May 2026 00:00:00 GMT

Read the original announcement