CVE-2009-3459

CISA Adds Seven Known Exploited Vulnerabilities to Catalog

CVSS 8.8 high · n/a n/a · published 2009-10-13

Heap-based buffer overflow in Adobe Reader and Acrobat 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2 allows remote attackers to execute arbitrary code via a crafted PDF file that triggers memory corruption, as exploited in the wild in October 2009. NOTE: some of these details are obtained from third party information.

NVD · CVE.org

Coverage 1 source

1. 2026-05-20 CISA Cybersecurity Advisories critical CISA Adds Seven Known Exploited Vulnerabilities to Catalog

   CISA adds 7 vulnerabilities to its Known Exploited Vulnerabilities Catalog due to active exploitation.

Mentioned with

CVE-2008-4250 CVE-2009-1537 CVE-2010-0249 CVE-2010-0806

Also covered

• CVE-2026-73570 Zimbra Collaboration CVSS 8.9 · 5 articles · 2026-09-30
• CVE-2026-88772 Memory overflow vulnerability leading to Remote Code Execution or Denial of Service CVSS 9.5 · 4 articles · 2026-09-30
• CVE-2026-88771 A remote code execution vulnerability exists due to improper input validation, which can allow an unauthenticated attacker to execute arbitrary commands CVSS 9.5 · 4 articles · 2026-09-29
• CVE-2026-91191 Lantronix G520 Series Cellular Gateway Improper Verification of Cryptographic Signature CVSS 7.7 · 1 article · 2026-09-29
• CVE-2026-86950 Apple iOS and iPadOS CVSS 8.8 · 2 articles · 2026-09-29