{"schema_version":"1","data":[{"id":2974,"advisory_id":"44f70a87-c28b-49fd-bb3a-75ddf7fcad29","revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-28550","source_published_at":"2021-11-03T00:00:00+00:00","published_at":"2026-10-24T21:27:00.38172+00:00","extraction_method":"structured","technologies":["acrobat-and-reader","core-kev"],"cve_ids":["CVE-2021-28550"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Adobe Acrobat and Reader Use-After-Free Vulnerability","summary":"Adobe Acrobat and Reader contains a use-after-free vulnerability that could allow an unauthenticated attacker to achieve code execution in the context of the current user. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2021-28550","products":[{"name":{"value":"Acrobat and Reader","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2021-28550","aliases":["CVE-2021-28550"],"affected":[],"modified":"2021-11-03T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-416"],"cveID":"CVE-2021-28550","notes":"https://nvd.nist.gov/vuln/detail/CVE-2021-28550","dueDate":"2021-11-17","product":"Acrobat and Reader","dateAdded":"2021-11-03","vendorProject":"Adobe","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Adobe Acrobat and Reader contains a use-after-free vulnerability that could allow an unauthenticated attacker to achieve code execution in the context of the current user.","vulnerabilityName":"Adobe Acrobat and Reader Use-After-Free Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2021-28550","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"context_update":false},{"id":2973,"advisory_id":"98476a05-17e3-4056-b34c-d60f86fb32e5","revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-21017","source_published_at":"2021-11-03T00:00:00+00:00","published_at":"2026-10-24T21:26:59.771607+00:00","extraction_method":"structured","technologies":["acrobat-and-reader","core-kev"],"cve_ids":["CVE-2021-21017"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Adobe Acrobat and Reader Heap-based Buffer Overflow Vulnerability","summary":"Acrobat Acrobat and Reader contain a heap-based buffer overflow vulnerability that could allow an unauthenticated attacker to achieve code execution in the context of the current user. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2021-21017","products":[{"name":{"value":"Acrobat and Reader","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2021-21017","aliases":["CVE-2021-21017"],"affected":[],"modified":"2021-11-03T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-122"],"cveID":"CVE-2021-21017","notes":"https://nvd.nist.gov/vuln/detail/CVE-2021-21017","dueDate":"2021-11-17","product":"Acrobat and Reader","dateAdded":"2021-11-03","vendorProject":"Adobe","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Acrobat Acrobat and Reader contain a heap-based buffer overflow vulnerability that could allow an unauthenticated attacker to achieve code execution in the context of the current user.","vulnerabilityName":"Adobe Acrobat and Reader Heap-based Buffer Overflow Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2021-21017","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"context_update":false},{"id":2869,"advisory_id":"15cbd929-3e16-49bd-a552-1e7b63e8026b","revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2008-2992","source_published_at":"2022-03-03T00:00:00+00:00","published_at":"2026-10-24T21:25:56.580391+00:00","extraction_method":"structured","technologies":["acrobat-and-reader","core-kev"],"cve_ids":["CVE-2008-2992"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Adobe Reader and Acrobat Input Validation Vulnerability","summary":"Adobe Acrobat and Reader contain an input validation issue in a JavaScript method that could potentially lead to remote code execution. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2008-2992","products":[{"name":{"value":"Acrobat and Reader","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2008-2992","aliases":["CVE-2008-2992"],"affected":[],"modified":"2022-03-03T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-119"],"cveID":"CVE-2008-2992","notes":"https://nvd.nist.gov/vuln/detail/CVE-2008-2992","dueDate":"2022-03-24","product":"Acrobat and Reader","dateAdded":"2022-03-03","vendorProject":"Adobe","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Adobe Acrobat and Reader contain an input validation issue in a JavaScript method that could potentially lead to remote code execution.","vulnerabilityName":"Adobe Reader and Acrobat Input Validation Vulnerability","knownRansomwareCampaignUse":"Known"}},"related_cves":[{"value":"CVE-2008-2992","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"context_update":false},{"id":2517,"advisory_id":"b95af8ac-17f0-4443-b5f3-51db830e6a0c","revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2007-5659","source_published_at":"2022-06-08T00:00:00+00:00","published_at":"2026-10-24T21:19:56.393857+00:00","extraction_method":"structured","technologies":["acrobat-and-reader","core-kev"],"cve_ids":["CVE-2007-5659"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Adobe Acrobat and Reader Buffer Overflow Vulnerability","summary":"Adobe Acrobat and Reader contain a buffer overflow vulnerability that allows remote attackers to execute code via a PDF file with long arguments to unspecified JavaScript methods. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2007-5659","products":[{"name":{"value":"Acrobat and Reader","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2007-5659","aliases":["CVE-2007-5659"],"affected":[],"modified":"2022-06-08T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-119"],"cveID":"CVE-2007-5659","notes":"https://nvd.nist.gov/vuln/detail/CVE-2007-5659","dueDate":"2022-06-22","product":"Acrobat and Reader","dateAdded":"2022-06-08","vendorProject":"Adobe","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Adobe Acrobat and Reader contain a buffer overflow vulnerability that allows remote attackers to execute code via a PDF file with long arguments to unspecified JavaScript methods.","vulnerabilityName":"Adobe Acrobat and Reader Buffer Overflow Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2007-5659","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"context_update":false},{"id":2515,"advisory_id":"4728bf2c-821b-4189-b871-319123dddfbb","revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2008-0655","source_published_at":"2022-06-08T00:00:00+00:00","published_at":"2026-10-24T21:19:55.12961+00:00","extraction_method":"structured","technologies":["acrobat-and-reader","core-kev"],"cve_ids":["CVE-2008-0655"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Adobe Acrobat and Reader Unspecified Vulnerability","summary":"Adobe Acrobat and Reader contains an unespecified vulnerability described as a design flaw which could allow a specially crafted file to be printed silently an arbitrary number of times. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2008-0655","products":[{"name":{"value":"Acrobat and Reader","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2008-0655","aliases":["CVE-2008-0655"],"affected":[],"modified":"2022-06-08T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":[],"cveID":"CVE-2008-0655","notes":"https://nvd.nist.gov/vuln/detail/CVE-2008-0655","dueDate":"2022-06-22","product":"Acrobat and Reader","dateAdded":"2022-06-08","vendorProject":"Adobe","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Adobe Acrobat and Reader contains an unespecified vulnerability described as a design flaw which could allow a specially crafted file to be printed silently an arbitrary number of times.","vulnerabilityName":"Adobe Acrobat and Reader Unspecified Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2008-0655","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"context_update":false},{"id":2511,"advisory_id":"890654e1-8ef7-47c7-abea-a4f2d61caff2","revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2009-3953","source_published_at":"2022-06-08T00:00:00+00:00","published_at":"2026-10-24T21:19:52.81379+00:00","extraction_method":"structured","technologies":["acrobat-and-reader","core-kev"],"cve_ids":["CVE-2009-3953"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Adobe Acrobat and Reader Universal 3D Remote Code Execution Vulnerability","summary":"Adobe Acrobat and Reader contains an array boundary issue in Universal 3D (U3D) support that could lead to remote code execution. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2009-3953","products":[{"name":{"value":"Acrobat and Reader","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2009-3953","aliases":["CVE-2009-3953"],"affected":[],"modified":"2022-06-08T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-119"],"cveID":"CVE-2009-3953","notes":"https://nvd.nist.gov/vuln/detail/CVE-2009-3953","dueDate":"2022-06-22","product":"Acrobat and Reader","dateAdded":"2022-06-08","vendorProject":"Adobe","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Adobe Acrobat and Reader contains an array boundary issue in Universal 3D (U3D) support that could lead to remote code execution.","vulnerabilityName":"Adobe Acrobat and Reader Universal 3D Remote Code Execution Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2009-3953","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"context_update":false},{"id":2510,"advisory_id":"9fed23e1-49dd-4374-bfad-7918d5f4e63a","revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2009-4324","source_published_at":"2022-06-08T00:00:00+00:00","published_at":"2026-10-24T21:19:52.23445+00:00","extraction_method":"structured","technologies":["acrobat-and-reader","core-kev"],"cve_ids":["CVE-2009-4324"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Adobe Acrobat and Reader Use-After-Free Vulnerability","summary":"Use-after-free vulnerability in Adobe Acrobat and Reader allows remote attackers to execute code via a crafted PDF file. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2009-4324","products":[{"name":{"value":"Acrobat and Reader","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2009-4324","aliases":["CVE-2009-4324"],"affected":[],"modified":"2022-06-08T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-399"],"cveID":"CVE-2009-4324","notes":"https://nvd.nist.gov/vuln/detail/CVE-2009-4324","dueDate":"2022-06-22","product":"Acrobat and Reader","dateAdded":"2022-06-08","vendorProject":"Adobe","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Use-after-free vulnerability in Adobe Acrobat and Reader allows remote attackers to execute code via a crafted PDF file.","vulnerabilityName":"Adobe Acrobat and Reader Use-After-Free Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2009-4324","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"context_update":false},{"id":2506,"advisory_id":"920fabb6-9283-401a-8faa-c9b237a75b16","revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2010-2883","source_published_at":"2022-06-08T00:00:00+00:00","published_at":"2026-10-24T21:19:49.713998+00:00","extraction_method":"structured","technologies":["acrobat-and-reader","core-kev"],"cve_ids":["CVE-2010-2883"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Adobe Acrobat and Reader Stack-Based Buffer Overflow Vulnerability","summary":"Adobe Acrobat and Reader contain a stack-based buffer overflow vulnerability that allows remote attackers to execute code or cause denial-of-service (DoS). CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2010-2883","products":[{"name":{"value":"Acrobat and Reader","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2010-2883","aliases":["CVE-2010-2883"],"affected":[],"modified":"2022-06-08T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-119"],"cveID":"CVE-2010-2883","notes":"https://nvd.nist.gov/vuln/detail/CVE-2010-2883","dueDate":"2022-06-22","product":"Acrobat and Reader","dateAdded":"2022-06-08","vendorProject":"Adobe","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Adobe Acrobat and Reader contain a stack-based buffer overflow vulnerability that allows remote attackers to execute code or cause denial-of-service (DoS).","vulnerabilityName":"Adobe Acrobat and Reader Stack-Based Buffer Overflow Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2010-2883","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"context_update":false},{"id":1490,"advisory_id":"83571648-dbab-412e-8eba-5cc7689572a7","revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2018-4990","source_published_at":"2022-06-08T00:00:00+00:00","published_at":"2026-10-24T21:03:07.446984+00:00","extraction_method":"structured","technologies":["acrobat-and-reader","core-kev"],"cve_ids":["CVE-2018-4990"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Adobe Acrobat and Reader Double Free Vulnerability","summary":"Adobe Acrobat and Reader have a double free vulnerability that could lead to remote code execution. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2018-4990","products":[{"name":{"value":"Acrobat and Reader","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2018-4990","aliases":["CVE-2018-4990"],"affected":[],"modified":"2022-06-08T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-415"],"cveID":"CVE-2018-4990","notes":"https://nvd.nist.gov/vuln/detail/CVE-2018-4990","dueDate":"2022-06-22","product":"Acrobat and Reader","dateAdded":"2022-06-08","vendorProject":"Adobe","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Adobe Acrobat and Reader have a double free vulnerability that could lead to remote code execution.","vulnerabilityName":"Adobe Acrobat and Reader Double Free Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2018-4990","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"context_update":false},{"id":1262,"advisory_id":"294ed23c-3dd9-467e-905b-ee9aaa0e38fa","revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-26369","source_published_at":"2023-09-14T00:00:00+00:00","published_at":"2026-10-24T20:58:58.451122+00:00","extraction_method":"structured","technologies":["acrobat-and-reader","core-kev"],"cve_ids":["CVE-2023-26369"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Adobe Acrobat and Reader Out-of-Bounds Write Vulnerability","summary":"Adobe Acrobat and Reader contains an out-of-bounds write vulnerability that allows for code execution. CISA required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","evidence":"kev:CVE-2023-26369","products":[{"name":{"value":"Acrobat and Reader","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2023-26369","aliases":["CVE-2023-26369"],"affected":[],"modified":"2023-09-14T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-787"],"cveID":"CVE-2023-26369","notes":"https://helpx.adobe.com/security/products/acrobat/apsb23-34.html;  https://nvd.nist.gov/vuln/detail/CVE-2023-26369","dueDate":"2023-10-05","product":"Acrobat and Reader","dateAdded":"2023-09-14","vendorProject":"Adobe","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","known_exploited":true,"shortDescription":"Adobe Acrobat and Reader contains an out-of-bounds write vulnerability that allows for code execution.","vulnerabilityName":"Adobe Acrobat and Reader Out-of-Bounds Write Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2023-26369","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"context_update":false},{"id":1239,"advisory_id":"3ebd8f6e-ce54-46a6-8960-2e4836c9e641","revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-21608","source_published_at":"2023-10-10T00:00:00+00:00","published_at":"2026-10-24T20:58:44.854989+00:00","extraction_method":"structured","technologies":["acrobat-and-reader","core-kev"],"cve_ids":["CVE-2023-21608"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Adobe Acrobat and Reader Use-After-Free Vulnerability","summary":"Adobe Acrobat and Reader contains a use-after-free vulnerability that allows for code execution in the context of the current user. CISA required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","evidence":"kev:CVE-2023-21608","products":[{"name":{"value":"Acrobat and Reader","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2023-21608","aliases":["CVE-2023-21608"],"affected":[],"modified":"2023-10-10T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-416"],"cveID":"CVE-2023-21608","notes":"https://helpx.adobe.com/security/products/acrobat/apsb23-01.html;  https://nvd.nist.gov/vuln/detail/CVE-2023-21608","dueDate":"2023-10-31","product":"Acrobat and Reader","dateAdded":"2023-10-10","vendorProject":"Adobe","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","known_exploited":true,"shortDescription":"Adobe Acrobat and Reader contains a use-after-free vulnerability that allows for code execution in the context of the current user.","vulnerabilityName":"Adobe Acrobat and Reader Use-After-Free Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2023-21608","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"context_update":false},{"id":197,"advisory_id":"a26fa0f6-9205-45d6-8551-f65c80e3209b","revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-34621","source_published_at":"2026-04-13T00:00:00+00:00","published_at":"2026-10-24T20:42:12.278205+00:00","extraction_method":"structured","technologies":["acrobat-and-reader","core-kev"],"cve_ids":["CVE-2026-34621"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Adobe Acrobat and Reader Prototype Pollution Vulnerability","summary":"Adobe Acrobat and Reader contain a prototype pollution vulnerability that allows for arbitrary code execution. CISA required action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","evidence":"kev:CVE-2026-34621","products":[{"name":{"value":"Acrobat and Reader","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-34621","aliases":["CVE-2026-34621"],"affected":[],"modified":"2026-04-13T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-1321"],"cveID":"CVE-2026-34621","notes":"https://helpx.adobe.com/security/products/acrobat/apsb26-43.html ; https://nvd.nist.gov/vuln/detail/CVE-2026-34621","dueDate":"2026-04-27","product":"Acrobat and Reader","dateAdded":"2026-04-13","vendorProject":"Adobe","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","known_exploited":true,"shortDescription":"Adobe Acrobat and Reader contain a prototype pollution vulnerability that allows for arbitrary code execution.","vulnerabilityName":"Adobe Acrobat and Reader Prototype Pollution Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2026-34621","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"context_update":false},{"id":160,"advisory_id":"016a4bda-a08a-49ea-bcfb-651f98350a80","revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2009-3459","source_published_at":"2026-05-20T00:00:00+00:00","published_at":"2026-10-24T20:41:48.648621+00:00","extraction_method":"structured","technologies":["acrobat-and-reader","core-kev"],"cve_ids":["CVE-2009-3459"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Adobe Acrobat and Reader Heap-Based Buffer Overflow Vulnerability","summary":"Adobe Acrobat and Reader contain a heap-based buffer overflow vulnerability which could allow remote attackers to execute arbitrary code via a crafted PDF file that triggers memory corruption. CISA required action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","evidence":"kev:CVE-2009-3459","products":[{"name":{"value":"Acrobat and Reader","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2009-3459","aliases":["CVE-2009-3459"],"affected":[],"modified":"2026-05-20T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-119"],"cveID":"CVE-2009-3459","notes":"https://www.cisa.gov/news-events/alerts/2009/10/13/adobe-reader-and-acrobat-vulnerabilities ; https://web.archive.org/web/20120324170253/http://www.adobe.com/support/security/bulletins/apsb09-15.html#:~:text=CVE%2D2009%2D3459).-,NOTE%3A,-There%20are%20reports ; https://nvd.nist.gov/vuln/detail/CVE-2009-3459","dueDate":"2026-06-03","product":"Acrobat and Reader","dateAdded":"2026-05-20","vendorProject":"Adobe","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","known_exploited":true,"shortDescription":"Adobe Acrobat and Reader contain a heap-based buffer overflow vulnerability which could allow remote attackers to execute arbitrary code via a crafted PDF file that triggers memory corruption.","vulnerabilityName":"Adobe Acrobat and Reader Heap-Based Buffer Overflow Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2009-3459","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"context_update":false}],"next_after":2974,"next_before":160}