CVE-2009-3953
Adobe Acrobat and Reader Universal 3D Remote Code Execution Vulnerability
CVSS
—
No CVSS
EPSS
83.2%
p100
KEV
YES
Jun 8, 2022
Exploit Today
80
0-100
Published: — · Last modified: —
83.2%EPSS · 30 days83.9%
2026-09-162026-10-14
Product
Adobe / Acrobat and Reader
Vulnerability
Adobe Acrobat and Reader Universal 3D Remote Code Execution Vulnerability
Added to KEV
Jun 8, 2022
Remediate by
Jun 22, 2022
Known ransomware use
No
Summary description
Adobe Acrobat and Reader contains an array boundary issue in Universal 3D (U3D) support that could lead to remote code execution.
Required action
Apply updates per vendor instructions.
Notes
https://nvd.nist.gov/vuln/detail/CVE-2009-3953
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2026-346218.6 HIG82.0%
KEV—75Adobe Acrobat and Reader Prototype Pollution Vulnerability48dCVE-2008-2992—99.9%
KEV—80Adobe Reader and Acrobat Input Validation Vulnerability—CVE-2007-5659—99.8%
KEV—80Adobe Acrobat and Reader Buffer Overflow Vulnerability—CVE-2021-21017—99.7%
KEV—80Adobe Acrobat and Reader Heap-based Buffer Overflow Vulnerability—CVE-2009-3459—99.7%
KEV—80Adobe Acrobat and Reader Heap-Based Buffer Overflow Vulnerability—CVE-2010-2883—99.6%
KEV—80Adobe Acrobat and Reader Stack-Based Buffer Overflow Vulnerability—