Security feed

24 October 2026

advisoryKnown exploited CVECISA Known Exploited Vulnerabilities24 Oct 2026

Adobe Reader and Acrobat Arbitrary Code Execution Vulnerability

Unspecified vulnerability in Adobe Reader and Acrobat allows attackers to cause a denial of service or possibly execute arbitrary code. CISA required action: Apply updates per vendor instructions.

Announced 3 Mar 2022

Reader and Acrobat CVE-2010-0188

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: kev:CVE-2010-0188

Reader and Acrobat

Source reference: /product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Related CVEs: CVE-2010-0188
Source reference: /cveID

Publisher severity

No explicit severity was provided.

Event: #2868 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 21:25:56 GMT
Publisher date: Thu, 03 Mar 2022 00:00:00 GMT

Read the original announcement

advisoryKnown exploited CVECISA Known Exploited Vulnerabilities24 Oct 2026

Adobe Reader and Acrobat Memory Corruption Vulnerability

An memory corruption vulnerability exists in the acroform.dll in Adobe Reader that allows an attacker to perform remote code execution. CISA required action: Apply updates per vendor instructions.

Announced 3 Mar 2022

Reader and Acrobat CVE-2013-0640

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: kev:CVE-2013-0640

Reader and Acrobat

Source reference: /product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Related CVEs: CVE-2013-0640
Source reference: /cveID

Publisher severity

No explicit severity was provided.

Event: #2854 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 21:25:46 GMT
Publisher date: Thu, 03 Mar 2022 00:00:00 GMT

Read the original announcement

advisoryKnown exploited CVECISA Known Exploited Vulnerabilities24 Oct 2026

Adobe Reader and Acrobat Memory Corruption Vulnerability

Adobe Reader and Acrobat contain a memory corruption vulnerability which can allow attackers to execute arbitrary code or cause a denial of service. CISA required action: Apply updates per vendor instructions.

Announced 3 Mar 2022

Reader and Acrobat CVE-2013-3346

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: kev:CVE-2013-3346

Reader and Acrobat

Source reference: /product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Related CVEs: CVE-2013-3346
Source reference: /cveID

Publisher severity

No explicit severity was provided.

Event: #2849 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 21:25:43 GMT
Publisher date: Thu, 03 Mar 2022 00:00:00 GMT

Read the original announcement

advisoryKnown exploited CVECISA Known Exploited Vulnerabilities24 Oct 2026

Adobe Reader and Acrobat Use-After-Free Vulnerability

Adobe Reader and Acrobat contain a use-after-free vulnerability which can allow for code execution. CISA required action: Apply updates per vendor instructions.

Announced 3 Mar 2022

Reader and Acrobat CVE-2014-0496

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: kev:CVE-2014-0496

Reader and Acrobat

Source reference: /product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Related CVEs: CVE-2014-0496
Source reference: /cveID

Publisher severity

No explicit severity was provided.

Event: #2847 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 21:25:42 GMT
Publisher date: Thu, 03 Mar 2022 00:00:00 GMT

Read the original announcement

advisoryKnown exploited CVECISA Known Exploited Vulnerabilities24 Oct 2026

Adobe Reader and Adobe Acrobat Stack-Based Buffer Overflow Vulnerability

Stack-based buffer overflow in Adobe Reader and Adobe Acrobat allows remote attackers to execute arbitrary code. CISA required action: Apply updates per vendor instructions.

Announced 25 Mar 2022

Reader and Acrobat CVE-2009-0927

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: kev:CVE-2009-0927

Reader and Acrobat

Source reference: /product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Related CVEs: CVE-2009-0927
Source reference: /cveID

Publisher severity

No explicit severity was provided.

Event: #2750 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 21:23:50 GMT
Publisher date: Fri, 25 Mar 2022 00:00:00 GMT

Read the original announcement

advisoryKnown exploited CVECISA Known Exploited Vulnerabilities24 Oct 2026

Adobe Reader and Acrobat Arbitrary Integer Overflow Vulnerability

Integer overflow vulnerability in Adobe Reader and Acrobat allows attackers to execute remote code. CISA required action: Apply updates per vendor instructions.

Announced 28 Mar 2022

Reader and Acrobat CVE-2013-2729

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: kev:CVE-2013-2729

Reader and Acrobat

Source reference: /product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Related CVEs: CVE-2013-2729
Source reference: /cveID

Publisher severity

No explicit severity was provided.

Event: #2674 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 21:22:22 GMT
Publisher date: Mon, 28 Mar 2022 00:00:00 GMT

Read the original announcement

advisoryKnown exploited CVECISA Known Exploited Vulnerabilities24 Oct 2026

Adobe Reader and Acrobat Sandbox Bypass Vulnerability

Adobe Reader and Acrobat on Windows allow attackers to bypass a sandbox protection mechanism, and consequently execute native code in a privileged context. CISA required action: Apply updates per vendor instructions.

Announced 25 May 2022

Reader and Acrobat CVE-2014-0546

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: kev:CVE-2014-0546

Reader and Acrobat

Source reference: /product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Related CVEs: CVE-2014-0546
Source reference: /cveID

Publisher severity

No explicit severity was provided.

Event: #2538 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 21:20:09 GMT
Publisher date: Wed, 25 May 2022 00:00:00 GMT

Read the original announcement

advisoryKnown exploited CVECISA Known Exploited Vulnerabilities24 Oct 2026

Adobe Reader and Acrobat Universal 3D Memory Corruption Vulnerability

The Universal 3D (U3D) component in Adobe Reader and Acrobat contains a memory corruption vulnerability which could allow remote attackers to execute code or cause denial-of-service (DoS). CISA required action: Apply updates per vendor instructions.

Announced 8 Jun 2022

Reader and Acrobat CVE-2011-2462

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: kev:CVE-2011-2462

Reader and Acrobat

Source reference: /product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Related CVEs: CVE-2011-2462
Source reference: /cveID

Publisher severity

No explicit severity was provided.

Event: #2505 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 21:19:48 GMT
Publisher date: Wed, 08 Jun 2022 00:00:00 GMT

Read the original announcement