Adobe product
Acrobat and Reader
No Acrobat and Reader CVE is in the CISA KEV catalogue.
Tracked since 12 Apr · latest article 21 May · RSS · API
0Open KEV deadlines
None open
0Added to KEV · 90 days
of 0 in the full CISA catalogue · all time
0High exploit odds · current
EPSS top 5%, not in KEV
0Articles · 7 days
none this week
Exploited, by due date
No Acrobat and Reader CVE is in the CISA KEV catalogue.
Patch cadence and exploit odds
How often CISA adds Acrobat and Reader CVEs, how many have a fix, and where their exploit odds sit.
Added to CISA KEV per quarter
CISA has not added a Acrobat and Reader CVE to KEV.
Fix listed
2 of 2 CVEs in coverage
Every CVE in coverage has a fix recorded.
EPSS percentile of each CVE
One dot per CVE; a red diamond marks those in CISA KEV.
Show as tableHide table
| CVE | EPSS percentile |
|---|---|
| CVE-2009-3459 | 99.7 |
| CVE-2026-34621 | 94.3 |
Coverage17 articles · all time
The latest 17 articles naming Acrobat and Reader, in the shared story grammar.
Quiet for 23 weekslast report 21 May17 articles8 outlets
17 articles from 8 outlets since 12 Apr. Quiet since 21 May.
- Sun 12 Apr, 06:31 UTC. The Hacker News, first report. Adobe patches zero day flaw in Acrobat Reader, CVE-2026-34621. Cites a CVE in CISA KEV.
- Sun 12 Apr, 08:08 UTC. SecurityWeek, its first report on the story. Adobe Patches Reader Zero-Day Exploited for Months. Cites a CVE in CISA KEV.
- Sun 12 Apr, 18:22 UTC. Security Affairs, its first report on the story. Patch Issued for Critical Adobe Acrobat Zero Day CVE-2026-34621. Cites a CVE in CISA KEV.
- Mon 13 Apr, 11:41 UTC. SOCRadar, its first report on the story. Adobe patches Acrobat after CVE‑2026‑34621 exploited in the wild. Cites a CVE in CISA KEV.
- Mon 13 Apr, 12:20 UTC. Malwarebytes, its first report on the story. Adobe Reader zero day exploited via malicious PDF to steal files. Cites a CVE in CISA KEV.
- Mon 13 Apr, 14:01 UTC. SOCRadar. Alleged Police Tipline Data Sale, iOS and Adobe Exploits, RDWeb Access Listings, and Gunra Recruitment. Cites a CVE in CISA KEV.
- Mon 13 Apr, 21:30 UTC. Dark Reading, its first report on the story. Adobe patches CVE-2026-34621 in Acrobat after wild exploitation. Cites a CVE in CISA KEV.
- Mon 13 Apr, 21:40 UTC. CISA, its first report on the story. CISA warns of active Adobe Acrobat flaw letting hackers run code. Cites a CVE in CISA KEV.
- Mon 13 Apr, 22:05 UTC. CISA. Adobe Acrobat Bug CVE-2026-34621 Allows Arbitrary Code Execution. Cites a CVE in CISA KEV.
- Tue 14 Apr, 08:11 UTC. Security Affairs. CISA Adds Critical Adobe, Microsoft, Fortinet Flaws to KEV Catalog. Cites a CVE in CISA KEV.
- Tue 14 Apr, 17:21 UTC. SecurityWeek. Adobe Patches 55 Vulnerabilities Across 11 Products. Cites a CVE in CISA KEV.
- Tue 14 Apr, 22:01 UTC. Krebs on Security, its first report on the story. Microsoft fixes 167 flaws, patches SharePoint zero day exploit. Cites a CVE in CISA KEV.
- Wed 15 Apr, 14:04 UTC. The Hacker News. Exploiters target SAP SQLi and Adobe zero day flaws in April.
- Wed 20 May, 18:02 UTC. CISA. CISA adds seven KEV flaws, including 2026 Microsoft Defender bugs. Cites a CVE in CISA KEV.
- Wed 20 May, 19:34 UTC. CISA. CISA Warns of Active Exploits in Adobe PDF Flaw CVE‑2009‑3459. Cites a CVE in CISA KEV.
- Wed 20 May, 20:12 UTC. CISA. CISA Updates KEV Catalog with New Actively Exploited Flaws. Cites a CVE in CISA KEV.
- Thu 21 May, 21:32 UTC. Security Affairs. CISA Adds Critical Flaws in Windows, Office, Defender to KEV List. Cites a CVE in CISA KEV.
- Known exploited CVE
- CVE not in KEV
- No CVE
- Larger: an outlet’s first report
- Square: official source
- Coverage over time
- Quiet time, folded
Show all 17 articles as a listHide the list
- Sun 12 AprDay 03
- Adobe patches zero day flaw in Acrobat Reader, CVE-2026-3462106:31 · The Hacker News · First report · Exploited CVE · Known exploited CVE
- Patch Issued for Critical Adobe Acrobat Zero Day CVE-2026-3462118:22 · Security Affairs · Known exploited CVE
- Mon 13 AprDay 16
- Adobe patches Acrobat after CVE‑2026‑34621 exploited in the wild11:41 · SOCRadar · Known exploited CVE
- Adobe Reader zero day exploited via malicious PDF to steal files12:20 · Malwarebytes · Known exploited CVE
- CISA warns of active Adobe Acrobat flaw letting hackers run code21:40 · CISA · official · CISA alert · Known exploited CVE
Show 3 more from 13 Apr
- Alleged Police Tipline Data Sale, iOS and Adobe Exploits, RDWeb Access Listings, and Gunra Recruitment14:01 · SOCRadar · Known exploited CVE
- Adobe patches CVE-2026-34621 in Acrobat after wild exploitation21:30 · Dark Reading · Known exploited CVE
- Adobe Acrobat Bug CVE-2026-34621 Allows Arbitrary Code Execution22:05 · CISA · official · Known exploited CVE
- Tue 14 AprDay 23
- CISA Adds Critical Adobe, Microsoft, Fortinet Flaws to KEV Catalog08:11 · Security Affairs · Known exploited CVE
- Microsoft fixes 167 flaws, patches SharePoint zero day exploit22:01 · Krebs on Security · Known exploited CVE
- Wed 15 AprDay 31
- Exploiters target SAP SQLi and Adobe zero day flaws in April14:04 · The Hacker News
Quiet for 5 weeks
Wed 20 MayDay 383- CISA adds seven KEV flaws, including 2026 Microsoft Defender bugs18:02 · CISA · official · Picked up again · Known exploited CVE
- CISA Warns of Active Exploits in Adobe PDF Flaw CVE‑2009‑345919:34 · CISA · official · Known exploited CVE
- CISA Updates KEV Catalog with New Actively Exploited Flaws20:12 · CISA · official · Known exploited CVE
- Thu 21 MayDay 391
- CISA Adds Critical Flaws in Windows, Office, Defender to KEV List21:32 · Security Affairs · Known exploited CVE
All CVEs in coverage2
Exploited first, then by EPSS
- CVE-2009-3459Exploited
Adobe Acrobat and Reader Heap-Based Buffer Overflow Vulnerability
8.8High87% EPSS · 4 articles - CVE-2026-34621Exploited
Adobe Acrobat and Reader Prototype Pollution Vulnerability
8.6High7.2% EPSS · 13 articles