All apps
A

Adobe Acrobat Pro

Productivity
Adobe·Website

Full-featured PDF editor and document management tool

Latest versions

Stable
macOSWindows
26.002.22031
Actively exploited
0
CISA KEV · 24 lifetime
Affecting latest
3
v26.002.22031
+1 unverified
Known CVEs
1413
across all versions, as matched by PemSync
Last checked
21 Oct 2026, 4:42

The latest tracked version (26.002.22031) is affected by 3 known vulnerabilities — update to the versions shown in the table below.

CVESeverityEPSS pctStatusScore source
MEDIUMvendor21%No fix available yet—31 Jul 2024
—53%No fix available yet—15 Jan 2024
—48%No fix available yet—15 Jan 2024
MEDIUMvendor23%Impact unverified—2 Jul 2024
HIGH 8.682%Latest not affectedNVD11 Apr 2026
HIGH 7.894%Latest not affectedNVD13 Sep 2023
HIGH 7.899%Latest not affectedNVD18 Jan 2023
HIGH 8.899%Latest not affectedNVD2 Sep 2021
HIGH 8.8100%Latest not affectedNVD11 Feb 2021
CVE-2014-0546Exploited
CRITICAL 9.898%Latest not affectedNVD12 Aug 2014
CVE-2014-0496Exploited
HIGH 8.899%Latest not affectedNVD15 Jan 2014
CVE-2013-3346Exploited
CRITICAL 9.8100%Latest not affectedNVD30 Aug 2013
CVE-2013-2729Exploited
CRITICAL 9.899%Latest not affectedNVD16 May 2013
CVE-2013-0641Exploited
HIGH 7.898%Latest not affectedNVD14 Feb 2013
CVE-2013-0640Exploited
HIGH 7.8100%Latest not affectedNVD14 Feb 2013
CVE-2011-2462Exploited
CRITICAL 9.8100%Latest not affectedNVD7 Dec 2011
CVE-2011-0611Exploited
HIGH 8.8100%Latest not affectedNVD13 Apr 2011
CVE-2011-0609Exploited
HIGH 7.899%Latest not affectedNVD15 Mar 2011
CVE-2010-2883Exploited
HIGH 7.3100%Latest not affectedNVD9 Sep 2010
CVE-2010-1297Exploited
HIGH 7.8100%Latest not affectedNVD8 Jun 2010
CVE-2010-0188Exploited
HIGH 7.8100%Latest not affectedNVD22 Feb 2010
CVE-2009-3953Exploited
HIGH 8.8100%Latest not affectedNVD13 Jan 2010
CVE-2009-4324Exploited
HIGH 7.8100%Latest not affectedNVD15 Dec 2009
CVE-2009-3459Exploited
HIGH 8.8100%Latest not affectedNVD13 Oct 2009
CVE-2009-1862Exploited
HIGH 7.898%Latest not affectedNVD23 Jul 2009
Showing 1–25 of 1413
Page 1 of 57

PemSync reports known, cataloged exploited vulnerabilities (CISA KEV) and published CVEs. It is not a zero-day detection or threat-intelligence system — a vulnerability may be exploited before it appears here. Absence of data does not mean an app is secure.

More from Adobe