{"schema_version":"1","data":[{"id":2868,"advisory_id":"09710dd8-5cc4-4d3d-b417-1ceae7bd8b46","revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2010-0188","source_published_at":"2022-03-03T00:00:00+00:00","published_at":"2026-10-24T21:25:56.026163+00:00","extraction_method":"structured","technologies":["core-kev","reader-and-acrobat"],"cve_ids":["CVE-2010-0188"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Adobe Reader and Acrobat Arbitrary Code Execution Vulnerability","summary":"Unspecified vulnerability in Adobe Reader and Acrobat allows attackers to cause a denial of service or possibly execute arbitrary code. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2010-0188","products":[{"name":{"value":"Reader and Acrobat","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2010-0188","aliases":["CVE-2010-0188"],"affected":[],"modified":"2022-03-03T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-94"],"cveID":"CVE-2010-0188","notes":"https://nvd.nist.gov/vuln/detail/CVE-2010-0188","dueDate":"2022-03-24","product":"Reader and Acrobat","dateAdded":"2022-03-03","vendorProject":"Adobe","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Unspecified vulnerability in Adobe Reader and Acrobat allows attackers to cause a denial of service or possibly execute arbitrary code.","vulnerabilityName":"Adobe Reader and Acrobat Arbitrary Code Execution Vulnerability","knownRansomwareCampaignUse":"Known"}},"related_cves":[{"value":"CVE-2010-0188","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"context_update":false},{"id":2854,"advisory_id":"367d9648-39b5-4298-943e-f005aa95b4b0","revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2013-0640","source_published_at":"2022-03-03T00:00:00+00:00","published_at":"2026-10-24T21:25:46.77111+00:00","extraction_method":"structured","technologies":["core-kev","reader-and-acrobat"],"cve_ids":["CVE-2013-0640"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Adobe Reader and Acrobat Memory Corruption Vulnerability","summary":"An memory corruption vulnerability exists in the acroform.dll in Adobe Reader that allows an attacker to perform remote code execution. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2013-0640","products":[{"name":{"value":"Reader and Acrobat","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2013-0640","aliases":["CVE-2013-0640"],"affected":[],"modified":"2022-03-03T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-787"],"cveID":"CVE-2013-0640","notes":"https://nvd.nist.gov/vuln/detail/CVE-2013-0640","dueDate":"2022-03-24","product":"Reader and Acrobat","dateAdded":"2022-03-03","vendorProject":"Adobe","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"An memory corruption vulnerability exists in the acroform.dll in Adobe Reader that allows an attacker to perform remote code execution.","vulnerabilityName":"Adobe Reader and Acrobat Memory Corruption Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2013-0640","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"context_update":false},{"id":2849,"advisory_id":"c3253c30-a918-4a03-b500-95af23f9b5c7","revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2013-3346","source_published_at":"2022-03-03T00:00:00+00:00","published_at":"2026-10-24T21:25:43.19831+00:00","extraction_method":"structured","technologies":["core-kev","reader-and-acrobat"],"cve_ids":["CVE-2013-3346"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Adobe Reader and Acrobat Memory Corruption Vulnerability","summary":"Adobe Reader and Acrobat contain a memory corruption vulnerability which can allow attackers to execute arbitrary code or cause a denial of service. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2013-3346","products":[{"name":{"value":"Reader and Acrobat","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2013-3346","aliases":["CVE-2013-3346"],"affected":[],"modified":"2022-03-03T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-119"],"cveID":"CVE-2013-3346","notes":"https://nvd.nist.gov/vuln/detail/CVE-2013-3346","dueDate":"2022-03-24","product":"Reader and Acrobat","dateAdded":"2022-03-03","vendorProject":"Adobe","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Adobe Reader and Acrobat contain a memory corruption vulnerability which can allow attackers to execute arbitrary code or cause a denial of service.","vulnerabilityName":"Adobe Reader and Acrobat Memory Corruption Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2013-3346","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"context_update":false},{"id":2847,"advisory_id":"abeb7549-d689-4a12-abb0-8ffd1532179d","revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2014-0496","source_published_at":"2022-03-03T00:00:00+00:00","published_at":"2026-10-24T21:25:42.030733+00:00","extraction_method":"structured","technologies":["core-kev","reader-and-acrobat"],"cve_ids":["CVE-2014-0496"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Adobe Reader and Acrobat Use-After-Free Vulnerability","summary":"Adobe Reader and Acrobat contain a use-after-free vulnerability which can allow for code execution. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2014-0496","products":[{"name":{"value":"Reader and Acrobat","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2014-0496","aliases":["CVE-2014-0496"],"affected":[],"modified":"2022-03-03T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-399"],"cveID":"CVE-2014-0496","notes":"https://nvd.nist.gov/vuln/detail/CVE-2014-0496","dueDate":"2022-03-24","product":"Reader and Acrobat","dateAdded":"2022-03-03","vendorProject":"Adobe","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Adobe Reader and Acrobat contain a use-after-free vulnerability which can allow for code execution.","vulnerabilityName":"Adobe Reader and Acrobat Use-After-Free Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2014-0496","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"context_update":false},{"id":2750,"advisory_id":"05bb03a2-65ea-4085-969b-f7d598d63444","revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2009-0927","source_published_at":"2022-03-25T00:00:00+00:00","published_at":"2026-10-24T21:23:50.618948+00:00","extraction_method":"structured","technologies":["core-kev","reader-and-acrobat"],"cve_ids":["CVE-2009-0927"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Adobe Reader and Adobe Acrobat Stack-Based Buffer Overflow Vulnerability","summary":"Stack-based buffer overflow in Adobe Reader and Adobe Acrobat allows remote attackers to execute arbitrary code. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2009-0927","products":[{"name":{"value":"Reader and Acrobat","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2009-0927","aliases":["CVE-2009-0927"],"affected":[],"modified":"2022-03-25T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-20"],"cveID":"CVE-2009-0927","notes":"https://nvd.nist.gov/vuln/detail/CVE-2009-0927","dueDate":"2022-04-15","product":"Reader and Acrobat","dateAdded":"2022-03-25","vendorProject":"Adobe","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Stack-based buffer overflow in Adobe Reader and Adobe Acrobat allows remote attackers to execute arbitrary code.","vulnerabilityName":"Adobe Reader and Adobe Acrobat Stack-Based Buffer Overflow Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2009-0927","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"context_update":false},{"id":2674,"advisory_id":"43a153dd-219c-4148-8e10-417c4a7deff1","revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2013-2729","source_published_at":"2022-03-28T00:00:00+00:00","published_at":"2026-10-24T21:22:22.806751+00:00","extraction_method":"structured","technologies":["core-kev","reader-and-acrobat"],"cve_ids":["CVE-2013-2729"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Adobe Reader and Acrobat Arbitrary Integer Overflow Vulnerability","summary":"Integer overflow vulnerability in Adobe Reader and Acrobat allows attackers to execute remote code. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2013-2729","products":[{"name":{"value":"Reader and Acrobat","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2013-2729","aliases":["CVE-2013-2729"],"affected":[],"modified":"2022-03-28T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-189"],"cveID":"CVE-2013-2729","notes":"https://nvd.nist.gov/vuln/detail/CVE-2013-2729","dueDate":"2022-04-18","product":"Reader and Acrobat","dateAdded":"2022-03-28","vendorProject":"Adobe","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Integer overflow vulnerability in Adobe Reader and Acrobat allows attackers to execute remote code.","vulnerabilityName":"Adobe Reader and Acrobat Arbitrary Integer Overflow Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2013-2729","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"context_update":false},{"id":2538,"advisory_id":"5cb69a65-65c9-427f-a9d4-26e36683bedc","revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2014-0546","source_published_at":"2022-05-25T00:00:00+00:00","published_at":"2026-10-24T21:20:09.414273+00:00","extraction_method":"structured","technologies":["core-kev","reader-and-acrobat"],"cve_ids":["CVE-2014-0546"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Adobe Reader and Acrobat Sandbox Bypass Vulnerability","summary":"Adobe Reader and Acrobat on Windows allow attackers to bypass a sandbox protection mechanism, and consequently execute native code in a privileged context. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2014-0546","products":[{"name":{"value":"Reader and Acrobat","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2014-0546","aliases":["CVE-2014-0546"],"affected":[],"modified":"2022-05-25T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":[],"cveID":"CVE-2014-0546","notes":"https://nvd.nist.gov/vuln/detail/CVE-2014-0546","dueDate":"2022-06-15","product":"Reader and Acrobat","dateAdded":"2022-05-25","vendorProject":"Adobe","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Adobe Reader and Acrobat on Windows allow attackers to bypass a sandbox protection mechanism, and consequently execute native code in a privileged context.","vulnerabilityName":"Adobe Reader and Acrobat Sandbox Bypass Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2014-0546","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"context_update":false},{"id":2505,"advisory_id":"c2569120-f42d-481f-8714-4c66fb5f26ae","revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2011-2462","source_published_at":"2022-06-08T00:00:00+00:00","published_at":"2026-10-24T21:19:48.922391+00:00","extraction_method":"structured","technologies":["core-kev","reader-and-acrobat"],"cve_ids":["CVE-2011-2462"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Adobe Reader and Acrobat Universal 3D Memory Corruption Vulnerability","summary":"The Universal 3D (U3D) component in Adobe Reader and Acrobat contains a memory corruption vulnerability which could allow remote attackers to execute code or cause denial-of-service (DoS). CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2011-2462","products":[{"name":{"value":"Reader and Acrobat","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2011-2462","aliases":["CVE-2011-2462"],"affected":[],"modified":"2022-06-08T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-787"],"cveID":"CVE-2011-2462","notes":"https://nvd.nist.gov/vuln/detail/CVE-2011-2462","dueDate":"2022-06-22","product":"Reader and Acrobat","dateAdded":"2022-06-08","vendorProject":"Adobe","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"The Universal 3D (U3D) component in Adobe Reader and Acrobat contains a memory corruption vulnerability which could allow remote attackers to execute code or cause denial-of-service (DoS).","vulnerabilityName":"Adobe Reader and Acrobat Universal 3D Memory Corruption Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2011-2462","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"context_update":false}],"next_after":2868,"next_before":2505}