Skip to content

Adobe product

Acrobat

Alert
No CISA KEV deadline is open. CISA last added an Acrobat CVE on 20 May.

Tracked since 13 Apr · latest article 14 Apr · RSS · API

0Open KEV deadlines

None open

0Added to KEV · 90 days

of 15 in the full CISA catalogue · all time

0High exploit odds · current

EPSS top 5%, not in KEV

0Articles · 7 days

none this week

Exploited, by due date15

Acrobat CVEs in CISA KEV with their federal deadlines. None is open.

Exploited Acrobat CVEs
CVEProductAddedFederal deadlineArticles
In CISA KEVCVE-2009-3459Acrobat and Reader20 MayPassed 3 Jun4
In CISA KEVCVE-2020-9715Acrobat13 AprPassed 27 Apr6
In CISA KEVCVE-2026-34621Acrobat and Reader13 AprPassed 27 Apr13
In CISA KEVCVE-2023-21608Acrobat and Reader10 OctPassed 31 Oct–
In CISA KEVCVE-2023-26369Acrobat and Reader14 SepPassed 5 Oct–
In CISA KEVCVE-2007-5659Acrobat and Reader8 JunPassed 22 Jun–
Show 9 moreVendor CSV of 83 entries for AdobeAll 83 vendor entries, including other products.

Patch cadence and exploit odds

How often CISA adds Acrobat CVEs, how many have a fix, and where their exploit odds sit.

Added to CISA KEV per quarter

0Q1 ’250Q2 ’250Q3 ’250Q4 ’250Q1 ’263Q2 ’260Q3 ’260Q4 ’26
Show as table
Added to CISA KEV per quarter
QuarterAdded
Q1 20250
Q2 20250
Q3 20250
Q4 20250
Q1 20260
Q2 20263
Q3 20260
Q4 20260

Fix listed

1 of 1 CVE in coverage

Every CVE in coverage has a fix recorded.

EPSS percentile of each CVE

One dot per CVE; a red diamond marks those in CISA KEV.

top 5%CVE-2020-9715: 98.4th percentile, in CISA KEV050100
Show as table
FIRST EPSS percentiles across CVEs in coverage
CVEEPSS percentile
CVE-2020-971598.4

Coverage6 articles · all time

The latest 6 articles naming Acrobat, in the shared story grammar.

Full timeline
Quiet for 28 weekslast report 14 Apr6 articles4 outlets

6 articles from 4 outlets since 13 Apr. Quiet since 14 Apr.

Now13 Apr131415161727 Oct28First reportCISA · 13 Apr, 21:30
  • Mon 13 Apr, 21:30 UTC. CISA, first report. CISA Adds Adobe Acrobat CVE‑2020‑9715 to KEV, Urges Patch. Cites a CVE in CISA KEV.
  • Mon 13 Apr, 22:05 UTC. CISA. CISA Flags Adobe Acrobat CVE-2020-9715 Flaw, Urges Patch. Cites a CVE in CISA KEV.
  • Tue 14 Apr, 06:31 UTC. The Hacker News, its first report on the story. CISA adds six KEV flaws amid active Fortinet exploits. Cites a CVE in CISA KEV.
  • Tue 14 Apr, 08:11 UTC. Security Affairs, its first report on the story. CISA Adds Critical Adobe, Microsoft, Fortinet Flaws to KEV Catalog. Cites a CVE in CISA KEV.
  • Tue 14 Apr, 09:17 UTC. SecurityWeek, its first report on the story. Organizations Warned of Exploited Windows, Adobe Acrobat Vulnerabilities. Cites a CVE in CISA KEV.
  • Tue 14 Apr, 17:21 UTC. SecurityWeek. Adobe Patches 55 Vulnerabilities Across 11 Products. Cites a CVE in CISA KEV.
  • Known exploited CVE
  • No CVE
  • Larger: an outlet’s first report
  • Square: official source
  • Coverage over time
  • Quiet time, folded
Show all 6 articles as a list
  1. Mon 13 AprDay 02
    1. CISA Adds Adobe Acrobat CVE‑2020‑9715 to KEV, Urges Patch21:30 · CISA · official · First report · CISA alert · Known exploited CVE
    2. CISA Flags Adobe Acrobat CVE-2020-9715 Flaw, Urges Patch22:05 · CISA · official · Known exploited CVE
  2. Tue 14 AprDay 14
    1. CISA adds six KEV flaws amid active Fortinet exploits06:31 · The Hacker News · Known exploited CVE
    2. CISA Adds Critical Adobe, Microsoft, Fortinet Flaws to KEV Catalog08:11 · Security Affairs · Known exploited CVE
    3. Adobe Patches 55 Vulnerabilities Across 11 Products17:21 · SecurityWeek · Known exploited CVE

All CVEs in coverage1

Exploited first, then by EPSS

In the CVE tracker
  • CVE-2020-9715Exploited

    Adobe Acrobat Use-After-Free Vulnerability

    7.8High33% EPSS · 6 articles
Updated AboutDevelopersSign in