CVE-2009-4764: Adobe Acrobat Reader

High severity, CVSS 9.3. EPSS: 3.5% chance of exploitation in the next 30 days.

Adobe Reader 8.x and 9.x on Windows is able to execute EXE files that are embedded in a PDF document, which makes it easier for remote attackers to trick users into executing arbitrary code via a crafted document.

Affected products

• Adobe Acrobat Reader: version 8.0 only; version 8.1 only; version 8.1.1 only; version 8.1.2 only; version 8.1.4 only; version 8.1.5 only; …

Published 2010-04-05. Last modified 2026-06-16.