Product / Adobe
Adobe Reader and Acrobat in CISA KEV
Answer CISA's KEV catalog lists 8 vulnerabilities in Adobe Reader and Acrobat as of catalog 2026.09.23, 9.9% of Adobe's 81 entries. First added 2022-03-03, latest 2022-06-08; 1 ransomware-linked.
- KEV entries
- 8
- Ransomware: known
- 112.5%
- First added
- 2022-03-03
- Latest added
- 2022-06-08
- Median days to due
- 21
- Open deadlines
- 0federal
TAdditions by year
| Year | Added |
|---|---|
| 2021 | 0 |
| 2022 | 8 |
| 2023 | 0 |
| 2024 | 0 |
| 2025 | 0 |
| 2026 | 0 |
WWeaknesses
| CWE | Entries | Share |
|---|---|---|
| CWE-787 Out-of-bounds write | 2 | 25% |
| CWE-189 | 1 | 12.5% |
| CWE-20 Improper input validation | 1 | 12.5% |
| CWE-399 Resource management errors (category) | 1 | 12.5% |
| CWE-119 Memory buffer bounds error | 1 | 12.5% |
| CWE-94 Code injection | 1 | 12.5% |
EAll entries
| CVE | Vulnerability | Added | Due | Ransomware | CWE |
|---|---|---|---|---|---|
| CVE-2011-2462 | Adobe Reader and Acrobat Universal 3D Memory Corruption Vulnerability | Unknown | CWE-787 | ||
| CVE-2014-0546 | Adobe Reader and Acrobat Sandbox Bypass Vulnerability | Unknown | none listed | ||
| CVE-2013-2729 | Adobe Reader and Acrobat Arbitrary Integer Overflow Vulnerability | Unknown | CWE-189 | ||
| CVE-2009-0927 | Adobe Reader and Adobe Acrobat Stack-Based Buffer Overflow Vulnerability | Unknown | CWE-20 | ||
| CVE-2014-0496 | Adobe Reader and Acrobat Use-After-Free Vulnerability | Unknown | CWE-399 | ||
| CVE-2013-3346 | Adobe Reader and Acrobat Memory Corruption Vulnerability | Unknown | CWE-119 | ||
| CVE-2013-0640 | Adobe Reader and Acrobat Memory Corruption Vulnerability | Unknown | CWE-787 | ||
| CVE-2010-0188 | Adobe Reader and Acrobat Arbitrary Code Execution Vulnerability | Known | CWE-94 |
Cite this
CISA's KEV catalog lists 8 vulnerabilities in Adobe Reader and Acrobat. Source: Telemetry analysis of the CISA Known Exploited Vulnerabilities catalog, version 2026.09.23 (released 2026-09-23). https://glide-telemetry.pages.dev/products/adobe-reader-and-acrobat/
Source: CISA KEV catalog v2026.09.23, released 2026-09-23. Windows end 2026-09-23.