adobe acrobat reader

Name: adobe acrobat reader
Brand: adobe

productUS

cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

by severity

24critical606high274medium15low

updated 2026-10-26

vulnerabilities (1,085)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2008-2992US	high7.8OT critical	99.8% (100th)	KEV	no fix	2008-11-04	≤ 8.1.2
CVE-2011-0611US	high8.8OT critical	99.4% (100th)	KEV	10.0.3	2011-04-13	3 versions
CVE-2009-0927US	high8.8OT critical	96.6% (100th)	KEV	8.1.3	2009-03-19	3 versions
CVE-2011-2462US	critical9.8OT critical	88.6% (100th)	KEV	no fix	2011-12-07	2 versions
CVE-2010-0188US	high7.8OT critical	88.2% (100th)	KEV	9.3.1	2010-02-22	2 versions
CVE-2007-5659US	high7.8OT critical	87.4% (100th)	KEV	8.1.2	2008-02-12	< 8.1.2
CVE-2013-0640US	high7.8OT critical	86.9% (100th)	KEV	9.5.4	2013-02-14	3 versions
CVE-2009-3459US	high9.3OT critical	86.6% (100th)	KEV	8.1.7	2009-10-13	3 versions
CVE-2021-21017US	medium6.8OT critical	86.3% (100th)	KEV	no fix	2021-02-11	2 versions
CVE-2009-4324US	high7.8OT critical	81.9% (100th)	KEV	9.3	2009-12-15	2 versions
CVE-2010-2883US	high7.3OT critical	81.4% (100th)	KEV	8.2.5	2010-09-09	2 versions
CVE-2013-3346US	critical9.8OT critical	78.9% (100th)	KEV	11.0.03	2013-08-30	3 versions
CVE-2013-2729US	critical9.8OT critical	66.6% (99th)	KEV	10.1.7	2013-05-16	3 versions
CVE-2011-0609US	high7.8OT critical	63.5% (99th)	KEV	no fix	2011-03-15	3 versions
CVE-2023-21608US	—OT critical	59.4% (99th)	KEV	no fix	2023-01-18	20.001.30005 → 20.005.30418
CVE-2021-28550US	high8.8OT critical	51.9% (99th)	KEV	no fix	2021-09-02	2 versions
CVE-2008-0655US	high8.8OT critical	37.9% (99th)	KEV	8.1.2	2008-02-07	< 8.1.2
CVE-2013-0641US	high7.8OT critical	32.3% (98th)	KEV	11.0.02	2013-02-14	3 versions
CVE-2014-0546US	critical9.8OT critical	22.3% (98th)	KEV	10.1.11	2014-08-12	2 versions
CVE-2009-1862US	high7.8OT critical	21.2% (98th)	KEV	no fix	2009-07-23	9.0 → 9.1.2
CVE-2023-26369US	—OT critical	6.75% (94th)	KEV	20.005.30524	2023-09-13	20.001.3005 → 20.005.30524
CVE-2009-0658US	high7.8	87.8% (100th)	Exploit	no fix	2009-02-20	3 versions
CVE-2013-2730US	high10.0	78.8% (100th)	Exploit	no fix	2013-05-16	38 versions
CVE-2010-1240US	high9.3	73.6% (99th)	Exploit	no fix	2010-04-05	= 9.3.1
CVE-2010-3654US	high9.3	69.7% (99th)	Exploit	no fix	2010-10-29	12 versions
CVE-2009-2990US	high9.3	68.6% (99th)	Exploit	no fix	2009-10-19	26 versions
CVE-2007-0046US	high7.5	56.8% (99th)	Exploit	no fix	2007-01-03	≤ 7.0.8
CVE-2007-0044US	medium4.3	56.8% (99th)	Exploit	no fix	2007-01-03	16 versions
CVE-2008-2549US	medium4.3	52.6% (99th)	Exploit	no fix	2008-06-04	32 versions
CVE-2009-3958US	high10.0	52.6% (99th)	Exploit	no fix	2010-01-13	50 versions
CVE-2006-6027US	high9.3	44.7% (99th)	Exploit	no fix	2006-11-21	9 versions
CVE-2018-4879US	critical9.8	28.6% (98th)	Exploit	no fix	2018-02-27	17.0 → 17.011.30070
CVE-2009-1492US	high9.3	25.5% (98th)	Exploit	no fix	2009-04-30	3 versions
CVE-2015-3073US	high10.0	25.5% (98th)	Exploit	no fix	2015-05-13	25 versions
CVE-2015-7622US	high10.0	23.4% (98th)	Exploit	no fix	2015-10-14	2 versions
CVE-2009-3431US	medium5.0	22.0% (98th)	Exploit	no fix	2009-09-25	24 versions
CVE-2010-4091US	high9.3	18.5% (97th)	Exploit	no fix	2010-11-07	26 versions
CVE-2009-2994US	high9.3	18.4% (97th)	Exploit	no fix	2009-10-19	26 versions
CVE-2007-1377US	medium5.0	18.1% (97th)	Exploit	no fix	2007-03-10	= 8.0
CVE-2010-2862US	high9.3	16.3% (97th)	Exploit	no fix	2010-08-05	2 versions
CVE-2018-4901US	high8.8	16.2% (97th)	Exploit	no fix	2018-02-27	17.0 → 17.011.30070
CVE-2007-0103US	medium6.8	16.1% (97th)	Exploit	no fix	2007-01-09	≤ 7.0.8
CVE-2021-21042US	medium6.5	14.7% (97th)	Exploit	no fix	2021-02-11	2 versions
CVE-2005-1306US	high7.5	14.5% (97th)	Exploit	no fix	2005-06-15	2 versions
CVE-2010-2201US	high9.3	14.3% (97th)	Exploit	no fix	2010-06-30	19 versions
CVE-2010-2168US	high9.3	14.3% (97th)	Exploit	no fix	2010-06-30	19 versions
CVE-2021-39863US	medium6.8	13.2% (96th)	Exploit	no fix	2021-09-29	20.001.30005 → 20.004.30006
CVE-2010-2204US	high9.3	13.0% (96th)	Exploit	no fix	2010-06-30	19 versions
CVE-1999-1576US	high7.5	12.9% (96th)	Exploit	no fix	1999-09-27	= 4.0
CVE-2009-2983US	high9.3	12.1% (96th)	Exploit	no fix	2009-10-19	26 versions

showing 50 of 1,085

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer297 CVEs
CWE-416Use After Free196 CVEs
CWE-125Out-of-bounds Read166 CVEs
CWE-787Out-of-bounds Write89 CVEs
CWE-20Improper Input Validation67 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor45 CVEs
CWE-264CWE-26441 CVEs
CWE-94Improper Control of Generation of Code ('Code Injection')30 CVEs

sources (2)

Which sources assert this record, and when.

USNVD / CVE1,085 CVEs
NLNCSC-NL (CSAF)6 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan