CISA Known Exploited Vulnerabilities Directory

Explore every threat in the CISA Known Exploited Vulnerabilities (KEV) catalog, enhanced with plain-English executive analysis, AWS relevance, and technical remediation guidance.

Showing 1–10 of 13 records

CVE Vendor Product Added Due Status
CVE-2009-3459 — Adobe Acrobat and Reader Heap-Based Buffer Overflow Vulnerability
Adobe Acrobat and Reader contain a heap-based buffer overflow vulnerability which could allow remote attackers to execute arbitrary code via a crafted PDF file that triggers memory corruption.
 Adobe Acrobat and Reader May 20, 2026 Jun 3, 2026
CVE-2026-34621 — Adobe Acrobat and Reader Prototype Pollution Vulnerability
Adobe Acrobat and Reader contain a prototype pollution vulnerability that allows for arbitrary code execution.
 Adobe Acrobat and Reader Apr 13, 2026 Apr 27, 2026
CVE-2023-21608 — Adobe Acrobat and Reader Use-After-Free Vulnerability
Adobe Acrobat and Reader contains a use-after-free vulnerability that allows for code execution in the context of the current user.
 Adobe Acrobat and Reader Oct 10, 2023 Oct 31, 2023
CVE-2023-26369 — Adobe Acrobat and Reader Out-of-Bounds Write Vulnerability
Adobe Acrobat and Reader contains an out-of-bounds write vulnerability that allows for code execution.
 Adobe Acrobat and Reader Sep 14, 2023 Oct 5, 2023
CVE-2007-5659 — Adobe Acrobat and Reader Buffer Overflow Vulnerability
Adobe Acrobat and Reader contain a buffer overflow vulnerability that allows remote attackers to execute code via a PDF file with long arguments to unspecified JavaScript methods.
 Adobe Acrobat and Reader Jun 8, 2022 Jun 22, 2022
CVE-2008-0655 — Adobe Acrobat and Reader Unspecified Vulnerability
Adobe Acrobat and Reader contains an unespecified vulnerability described as a design flaw which could allow a specially crafted file to be printed silently an arbitrary number of times.
 Adobe Acrobat and Reader Jun 8, 2022 Jun 22, 2022
CVE-2009-3953 — Adobe Acrobat and Reader Universal 3D Remote Code Execution Vulnerability
Adobe Acrobat and Reader contains an array boundary issue in Universal 3D (U3D) support that could lead to remote code execution.
 Adobe Acrobat and Reader Jun 8, 2022 Jun 22, 2022
CVE-2009-4324 — Adobe Acrobat and Reader Use-After-Free Vulnerability
Use-after-free vulnerability in Adobe Acrobat and Reader allows remote attackers to execute code via a crafted PDF file.
 Adobe Acrobat and Reader Jun 8, 2022 Jun 22, 2022
CVE-2010-2883 — Adobe Acrobat and Reader Stack-Based Buffer Overflow Vulnerability
Adobe Acrobat and Reader contain a stack-based buffer overflow vulnerability that allows remote attackers to execute code or cause denial-of-service (DoS).
 Adobe Acrobat and Reader Jun 8, 2022 Jun 22, 2022
CVE-2018-4990 — Adobe Acrobat and Reader Double Free Vulnerability
Adobe Acrobat and Reader have a double free vulnerability that could lead to remote code execution.
 Adobe Acrobat and Reader Jun 8, 2022 Jun 22, 2022