CISA Known Exploited Vulnerabilities Directory

Explore every threat in the CISA Known Exploited Vulnerabilities (KEV) catalog, enhanced with plain-English executive analysis, AWS relevance, and technical remediation guidance.

Showing 1–8 of 8 records

CVE Vendor Product Added Due Status
CVE-2011-2462 — Adobe Reader and Acrobat Universal 3D Memory Corruption Vulnerability
The Universal 3D (U3D) component in Adobe Reader and Acrobat contains a memory corruption vulnerability which could allow remote attackers to execute code or cause denial-of-service (DoS).
Adobe Reader and Acrobat Jun 8, 2022 Jun 22, 2022
CVE-2014-0546 — Adobe Reader and Acrobat Sandbox Bypass Vulnerability
Adobe Reader and Acrobat on Windows allow attackers to bypass a sandbox protection mechanism, and consequently execute native code in a privileged context.
Adobe Reader and Acrobat May 25, 2022 Jun 15, 2022
CVE-2013-2729 — Adobe Reader and Acrobat Arbitrary Integer Overflow Vulnerability
Integer overflow vulnerability in Adobe Reader and Acrobat allows attackers to execute remote code.
Adobe Reader and Acrobat Mar 28, 2022 Apr 18, 2022
CVE-2009-0927 — Adobe Reader and Adobe Acrobat Stack-Based Buffer Overflow Vulnerability
Stack-based buffer overflow in Adobe Reader and Adobe Acrobat allows remote attackers to execute arbitrary code.
Adobe Reader and Acrobat Mar 25, 2022 Apr 15, 2022
CVE-2010-0188 — Adobe Reader and Acrobat Arbitrary Code Execution Vulnerability
Unspecified vulnerability in Adobe Reader and Acrobat allows attackers to cause a denial of service or possibly execute arbitrary code.
Adobe Reader and Acrobat Mar 3, 2022 Mar 24, 2022 Ransomware
CVE-2013-0640 — Adobe Reader and Acrobat Memory Corruption Vulnerability
An memory corruption vulnerability exists in the acroform.dll in Adobe Reader that allows an attacker to perform remote code execution.
Adobe Reader and Acrobat Mar 3, 2022 Mar 24, 2022
CVE-2013-3346 — Adobe Reader and Acrobat Memory Corruption Vulnerability
Adobe Reader and Acrobat contain a memory corruption vulnerability which can allow attackers to execute arbitrary code or cause a denial of service.
Adobe Reader and Acrobat Mar 3, 2022 Mar 24, 2022
CVE-2014-0496 — Adobe Reader and Acrobat Use-After-Free Vulnerability
Adobe Reader and Acrobat contain a use-after-free vulnerability which can allow for code execution.
Adobe Reader and Acrobat Mar 3, 2022 Mar 24, 2022