Live › vulnerability › CVE-2009-1862
Go to dashboardCVE-2009-1862 is an unspecified flaw in Adobe Acrobat, Adobe Reader and Flash Player that lets remote attackers execute code or cause a denial of service. CISA lists it as actively exploited in the wild.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 19:11 UTC, 3h before NVD. All times on this page are UTC.
For Adobe Acrobat and Reader, apply updates per vendor instructions. For Adobe Flash Player, the impacted product is end-of-life and should be disconnected if still in use.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| Adobe Acrobat and Reader, Flash Player | vendor | – | – |
| adobe acrobat | vendor | >= 9.0, <= 9.1.2 | – |
| adobe acrobat reader | vendor | >= 9.0, <= 9.1.2 | – |
| adobe flash player | vendor | >= 9.0, <= 9.0.159.0 | – |
| adobe flash player | vendor | >= 10.0, <= 10.0.22.87 | – |
Check the installed Acrobat or Reader version under Help > About, and check whether Flash Player is present on any machine (Flash Player is end-of-life).
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Unspecified vulnerability in Adobe Reader and Acrobat 9.x through 9.1.2, and Adobe Flash Player 9.x through 9.0.159.0 and 10.x through 10.0.22.87, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via (1) a crafted Flash application in a .pdf file or (2) a crafted .swf file, related to authplay.dll, as exploited in the wild in July 2009.
This page as .md · .json · in your agent: get_signal("CVE-2009-1862")
CISA KEV catalog, Creative Commons 0 · EPSS scores by FIRST, used with attribution · NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.