CVE-2009-1061: Adobe Acrobat Reader

High severity, CVSS 9.3. EPSS: 11% chance of exploitation in the next 30 days.

Unspecified vulnerability in Adobe Acrobat Reader 9 before 9.1, 8 before 8.1.4, and 7 before 7.1.1 might allow remote attackers to execute arbitrary code via unknown attack vectors related to JBIG2 and "input validation," a different vulnerability than CVE-2009-0193 and CVE-2009-1062.

Affected products

• Adobe Acrobat Reader: from 7.0, before 7.1.1 (fixed in 7.1.1); from 8.0, before 8.1.4 (fixed in 8.1.4); from 9.0, before 9.1 (fixed in 9.1)

Published 2009-03-25. Last modified 2026-06-16.