Actively exploited · CISA KEV
Actively exploitedCVE-2009-0927
- First PoC
- 5895 days →Metasploit
- 481 days →First cited attacker
Signals
- Exploited in the wild
- Yesadded 2022-03-25 · due 2022-04-15. An observation, not a forecast.
- EPSS · 30-day forecast
- 97%Chance of exploitation in the next 30 days, 100th percentile of all CVEs. A forecast; KEV outranks it.
- CVSS · NVD
- not stated by sourcesNo NVD record yet.
- Internet exposure
- not stated by sourcesNo exposure census on this CVE's dispatches.
Exploits
6 known · links onlyMetasploit2
This module exploits a buffer overflow in Adobe Reader and Adobe Acrobat. Affected versions include < 7.1.1, < 8.1.3, and < 9.1. By creating a specially crafted pdf that a contains malformed Collab.getIcon() call, an attacker may be able to execute arbitrary code.
ruby · seen 2026-10-18
This module exploits a buffer overflow in Adobe Reader and Adobe Acrobat. Affected versions include < 7.1.1, < 8.1.3, and < 9.1. By creating a specially crafted pdf that a contains malformed Collab.getIcon() call, an attacker may be able to execute arbitrary code.
ruby · seen 2026-10-18
Exploit-DB4
created 2009-05-04
created 2009-09-03
created 2010-04-30
created 2010-09-25
On the wire
0 dispatchesNo dispatch on our wire has named this CVE yet.
Watch this one?
KEV additions reach Telegram and the KEV-only RSS as they land.
Check your stack
Paste what you run: the CVEs exploited in the wild against it, and who is cited as exploiting them, with the report.
Stack checkNo key. No signup.