CVE-2008-2992
Adobe Reader and Acrobat Input Validation Vulnerability
CVSS
—
No CVSS
EPSS
98.5%
p100
KEV
YES
Mar 3, 2022
Exploit Today
80
0-100
Published: — · Last modified: —
98.5%EPSS · 30 days98.5%
2026-09-172026-10-15
Product
Adobe / Acrobat and Reader
Vulnerability
Adobe Reader and Acrobat Input Validation Vulnerability
Added to KEV
Mar 3, 2022
Remediate by
Mar 24, 2022
Known ransomware use
Yes
Summary description
Adobe Acrobat and Reader contain an input validation issue in a JavaScript method that could potentially lead to remote code execution.
Required action
Apply updates per vendor instructions.
Notes
https://nvd.nist.gov/vuln/detail/CVE-2008-2992
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2026-346218.6 HIG82.0%
KEV—75Adobe Acrobat and Reader Prototype Pollution Vulnerability49dCVE-2007-5659—99.8%
KEV—80Adobe Acrobat and Reader Buffer Overflow Vulnerability—CVE-2009-3459—99.7%
KEV—80Adobe Acrobat and Reader Heap-Based Buffer Overflow Vulnerability—CVE-2021-21017—99.7%
KEV—80Adobe Acrobat and Reader Heap-based Buffer Overflow Vulnerability—CVE-2009-3953—99.7%
KEV—80Adobe Acrobat and Reader Universal 3D Remote Code Execution Vulnerability—CVE-2010-2883—99.6%
KEV—80Adobe Acrobat and Reader Stack-Based Buffer Overflow Vulnerability—