Adobe
Adobe Acrobat: vulnerabilidades y CVE
Adobe Acrobat tiene 1414 vulnerabilidades publicadas, 65 de ellas en los últimos 12 meses. 219 son críticas y 24 figuran en el catálogo de explotación activa de CISA.
CVE1414
Últimos 12 meses65
Críticas219
Explotadas activamente24
Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología
🔴 Explotadas activamente (CISA KEV)
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2009-3459 | Alta (8.8) | 87% | ⚠ Explotación activa | 13 oct 2009 | Heap-based buffer overflow in Adobe Reader and Acrobat 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2 allows remote attackers to execute arbitrary code via a crafted PDF file that triggers memory corruption, as… |
| CVE-2026-34621 | Alta (8.6) | 2.2% | ⚠ Explotación activa | 11 abr 2026 | Acrobat Reader versions 24.001.30356, 26.001.21367 and earlier are affected by an Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') vulnerability that could result in arbitrary… |
| CVE-2023-21608 | Alta (7.8) | 61% | ⚠ Explotación activa | 18 ene 2023 | Adobe Acrobat Reader versions 22.003.20282 (and earlier), 22.003.20281 (and earlier) and 20.005.30418 (and earlier) are affected by a Use After Free vulnerability that could result in arbitrary code execution in the… |
| CVE-2023-26369 | Alta (7.8) | 6.7% | ⚠ Explotación activa | 13 sept 2023 | Acrobat Reader versions 23.003.20284 (and earlier), 20.005.30516 (and earlier) and 20.005.30514 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the… |
| CVE-2008-0655 | Alta (8.8) | 38% | ⚠ Explotación activa | 7 feb 2008 | Multiple unspecified vulnerabilities in Adobe Reader and Acrobat before 8.1.2 have unknown impact and attack vectors. |
| CVE-2010-2883 | Alta (7.3) | 81% | ⚠ Explotación activa | 9 sept 2010 | Stack-based buffer overflow in CoolType.dll in Adobe Reader and Acrobat 9.x before 9.4, and 8.x before 8.2.5 on Windows and Mac OS X, allows remote attackers to execute arbitrary code or cause a denial of service… |
| CVE-2009-1862 | Alta (7.8) | 21% | ⚠ Explotación activa | 23 jul 2009 | Unspecified vulnerability in Adobe Reader and Acrobat 9.x through 9.1.2, and Adobe Flash Player 9.x through 9.0.159.0 and 10.x through 10.0.22.87, allows remote attackers to execute arbitrary code or cause a denial of… |
| CVE-2009-4324 | Alta (7.8) | 82% | ⚠ Explotación activa | 15 dic 2009 | Use-after-free vulnerability in the Doc.media.newPlayer method in Multimedia.api in Adobe Reader and Acrobat 9.x before 9.3, and 8.x before 8.2 on Windows and Mac OS X, allows remote attackers to execute arbitrary code… |
| CVE-2010-1297 | Alta (7.8) | 83% | ⚠ Explotación activa | 8 jun 2010 | Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64; Adobe AIR before 2.0.2.12610; and Adobe Reader and Acrobat 9.x before 9.3.3, and 8.x before 8.2.3 on Windows and Mac OS X, allow remote attackers to… |
| CVE-2009-3953 | Alta (8.8) | 83% | ⚠ Explotación activa | 13 ene 2010 | The U3D implementation in Adobe Reader and Acrobat 9.x before 9.3, 8.x before 8.2 on Windows and Mac OS X, and 7.x before 7.1.4 allows remote attackers to execute arbitrary code via malformed U3D data in a PDF document,… |
| CVE-2011-2462 | Crítica (9.8) | 89% | ⚠ Explotación activa | 7 dic 2011 | Unspecified vulnerability in the U3D component in Adobe Reader and Acrobat 10.1.1 and earlier on Windows and Mac OS X, and Adobe Reader 9.x through 9.4.6 on UNIX, allows remote attackers to execute arbitrary code or… |
| CVE-2011-0609 | Alta (7.8) | 64% | ⚠ Explotación activa | 15 mar 2011 | Unspecified vulnerability in Adobe Flash Player 10.2.154.13 and earlier on Windows, Mac OS X, Linux, and Solaris; 10.1.106.16 and earlier on Android; Adobe AIR 2.5.1 and earlier; and Authplay.dll (aka… |
| CVE-2007-5659 | Alta (7.8) | 87% | ⚠ Explotación activa | 12 feb 2008 | Multiple buffer overflows in Adobe Reader and Acrobat 8.1.1 and earlier allow remote attackers to execute arbitrary code via a PDF file with long arguments to unspecified JavaScript methods. NOTE: this issue might be… |
| CVE-2014-0546 | Crítica (9.8) | 22% | ⚠ Explotación activa | 12 ago 2014 | Adobe Reader and Acrobat 10.x before 10.1.11 and 11.x before 11.0.08 on Windows allow attackers to bypass a sandbox protection mechanism, and consequently execute native code in a privileged context, via unspecified… |
| CVE-2013-2729 | Crítica (9.8) | 67% | ⚠ Explotación activa | 16 may 2013 | Integer overflow in Adobe Reader and Acrobat 9.x before 9.5.5, 10.x before 10.1.7, and 11.x before 11.0.03 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2013-2727. |
| CVE-2008-2992 | Alta (7.8) | 98% | ⚠ Explotación activa | 4 nov 2008 | Stack-based buffer overflow in Adobe Acrobat and Reader 8.1.2 and earlier allows remote attackers to execute arbitrary code via a PDF file that calls the util.printf JavaScript function with a crafted format string… |
| CVE-2011-0611 | Alta (8.8) | 99% | ⚠ Explotación activa | 13 abr 2011 | Adobe Flash Player before 10.2.154.27 on Windows, Mac OS X, Linux, and Solaris and 10.2.156.12 and earlier on Android; Adobe AIR before 2.6.19140; and Authplay.dll (aka AuthPlayLib.bundle) in Adobe Reader 9.x before… |
| CVE-2014-0496 | Alta (8.8) | 40% | ⚠ Explotación activa | 15 ene 2014 | Use-after-free vulnerability in Adobe Reader and Acrobat 10.x before 10.1.9 and 11.x before 11.0.06 on Windows and Mac OS X allows attackers to execute arbitrary code via unspecified vectors. |
| CVE-2013-0640 | Alta (7.8) | 87% | ⚠ Explotación activa | 14 feb 2013 | Adobe Reader and Acrobat 9.x before 9.5.4, 10.x before 10.1.6, and 11.x before 11.0.02 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted PDF document, as… |
| CVE-2013-0641 | Alta (7.8) | 32% | ⚠ Explotación activa | 14 feb 2013 | Buffer overflow in Adobe Reader and Acrobat 9.x before 9.5.4, 10.x before 10.1.6, and 11.x before 11.0.02 allows remote attackers to execute arbitrary code via a crafted PDF document, as exploited in the wild in… |
Últimas vulnerabilidades
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2026-82001 | Media (5.5) | 0.23% | — | 8 sept 2026 | Acrobat Reader is affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability to exhaust system resources, resulting in… |
| CVE-2026-81997 | Media (6.3) | 0.24% | — | 8 sept 2026 | Acrobat Reader is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized… |
| CVE-2026-81996 | Alta (8.8) | 0.24% | — | 8 sept 2026 | Acrobat Reader is affected by an Incorrect Authorization vulnerability that could result in privilege escalation. A low-privileged attacker could exploit this vulnerability to gain elevated access. Exploitation of this… |
| CVE-2026-81994 | Media (6.3) | 0.60% | — | 8 sept 2026 | Acrobat Reader is affected by an Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') vulnerability that could lead to arbitrary file system read. An attacker could exploit this… |
| CVE-2026-81993 | Media (5.5) | 0.30% | — | 8 sept 2026 | Acrobat Reader is affected by a Heap-based Buffer Overflow vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation… |
| CVE-2026-81992 | Alta (7.8) | 0.34% | — | 8 sept 2026 | Acrobat Reader is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a… |
| CVE-2026-81991 | Media (5.5) | 0.26% | — | 8 sept 2026 | Acrobat Reader is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this… |
| CVE-2026-81990 | Alta (7.8) | 0.38% | — | 8 sept 2026 | Acrobat Reader is affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must… |
| CVE-2026-81989 | Alta (7.8) | 0.38% | — | 8 sept 2026 | Acrobat Reader is affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must… |
| CVE-2026-81988 | Alta (7.8) | 0.38% | — | 8 sept 2026 | Acrobat Reader is affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must… |
| CVE-2026-81987 | Alta (7.8) | 0.31% | — | 8 sept 2026 | Acrobat Reader is affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in… |
| CVE-2026-81986 | Alta (7.8) | 0.38% | — | 8 sept 2026 | Acrobat Reader is affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must… |
| CVE-2026-81985 | Alta (7.8) | 0.38% | — | 8 sept 2026 | Acrobat Reader is affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must… |
| CVE-2026-81984 | Media (5.5) | 0.33% | — | 8 sept 2026 | Acrobat Reader is affected by a Use After Free vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue… |
| CVE-2026-81983 | Alta (7.8) | 0.26% | — | 8 sept 2026 | Acrobat Reader is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim… |
| CVE-2026-81982 | Media (5.5) | 0.26% | — | 8 sept 2026 | Acrobat Reader is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this… |
| CVE-2026-81981 | Alta (7.8) | 0.26% | — | 8 sept 2026 | Acrobat Reader is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim… |
| CVE-2026-81980 | Alta (7.8) | 0.26% | — | 8 sept 2026 | Acrobat Reader is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim… |
| CVE-2026-81979 | Alta (7.8) | 0.26% | — | 8 sept 2026 | Acrobat Reader is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim… |
| CVE-2026-81978 | Media (5.5) | 0.26% | — | 8 sept 2026 | Acrobat Reader is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this… |
| CVE-2026-81977 | Media (5.5) | 0.26% | — | 8 sept 2026 | Acrobat Reader is affected by an Integer Underflow (Wrap or Wraparound) vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information.… |
| CVE-2026-81976 | Alta (7.8) | 0.38% | — | 8 sept 2026 | Acrobat Reader is affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must… |
| CVE-2026-81975 | Alta (7.8) | 0.38% | — | 8 sept 2026 | Acrobat Reader is affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must… |
| CVE-2026-81973 | Alta (7.8) | 0.38% | — | 8 sept 2026 | Acrobat Reader is affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must… |
| CVE-2026-80162 | Media (5.5) | 0.33% | — | 8 sept 2026 | Acrobat Reader is affected by a Use After Free vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue… |
| CVE-2026-80161 | Alta (7.8) | 0.29% | — | 8 sept 2026 | Acrobat Reader is affected by an Access of Resource Using Incompatible Type ('Type Confusion') vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit… |
| CVE-2026-80160 | Media (5.5) | 0.26% | — | 8 sept 2026 | Acrobat Reader is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this… |
| CVE-2026-80159 | Media (4) | 0.19% | — | 8 sept 2026 | Acrobat Reader is affected by an Untrusted Search Path vulnerability that could result in privilege escalation. An attacker with high privileges could leverage this vulnerability to gain elevated access. Exploit depends… |
| CVE-2026-79910 | Media (5.5) | 0.26% | — | 8 sept 2026 | Acrobat Reader is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this… |
| CVE-2026-79909 | Alta (7.8) | 0.38% | — | 8 sept 2026 | Acrobat Reader is affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must… |
🎯 Cómo se explota (técnicas ATT&CK)
Número de CVE de esta tecnología asignadas a cada técnica de explotación o de impacto principal.