CVE-2009-2981: Adobe Acrobat

High severity, CVSS 9.3. EPSS: 5.7% chance of exploitation in the next 30 days.

Adobe Reader and Acrobat 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2 do not properly validate input, which might allow attackers to bypass intended Trust Manager restrictions via unspecified vectors.

Affected products

• Adobe Acrobat: up to and including 9.1.3; version 7.0 only; version 7.0.1 only; version 7.0.2 only; version 7.0.3 only; version 7.0.4 only; …
• Adobe Acrobat Reader: up to and including 9.1.3; version 7.0 only; version 7.0.1 only; version 7.0.2 only; version 7.0.3 only; version 7.0.4 only; …

Published 2009-10-19. Last modified 2026-06-16.