Adobe Acrobat and Reader Heap-Based Buffer Overflow Vulnerability. Actively exploited: CISA added this vulnerability to its Known Exploited Vulnerabilities catalog on 20/05/2026. Patch affected systems as an emergency.
| Package | Affected versions | Patched versions |
|---|---|---|
| acrobat | ≥ 7.0, < 7.1.4≥ 8.0, < 8.1.7≥ 9.0, < 9.2 | 7.1.48.1.79.2 |
| acrobat reader | ≥ 7.0, < 7.1.4≥ 8.0, < 8.1.7≥ 9.0, < 9.2 | 7.1.48.1.79.2 |
Heap-based buffer overflow in Adobe Reader and Acrobat 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2 allows remote attackers to execute arbitrary code via a crafted PDF file that triggers memory corruption, as exploited in the wild in October 2009. NOTE: some of these details are obtained from third party information.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free