KEV 2009

DirectX DirectShow QuickTime Parser — NULL Byte Overwrite in quartz.dll via Malicious .mov File Enables RCE; MS09-028 June 2009

Adobe Reader and Acrobat — Heap Buffer Overflow via Crafted PDF Enables RCE; APSB09-15 Emergency Out-of-Band Patch October 2009

Microsoft Excel — Remote Code Execution via Invalid Object Access (17-Year-Old Zero-Day)

Microsoft Office PowerPoint — Invalid OutlineTextRefAtom Index Triggers Memory Corruption and Code Execution; Re-Added to KEV January 2026

Adobe Acrobat and Reader — Array Bounds Violation in Universal 3D (U3D) Processing Enables Remote Code Execution via Malicious PDF

Microsoft Office Excel — Malformed Record Object in .XLS File Enables Remote Code Execution

Microsoft Office Word — Crafted Tag with Invalid Length Field Triggers Buffer Overflow and Code Execution

Adobe Flash Player / Acrobat and Reader — Flash Memory Corruption Enables Code Execution via PDF with Embedded Flash Content

Adobe Acrobat and Reader — newplayer() JavaScript Method Use-After-Free Zero-Day Enables Code Execution via Malicious PDF

Adobe Reader and Acrobat — Stack Buffer Overflow Enables Remote Code Execution via Malicious PDF; Exploited Before Patch

Microsoft Windows Kernel — Improper Validation of Kernel Object Changes Enables Local Privilege Escalation via Crafted Application

Microsoft Excel — FEATHEADER Record Invalid cbHdrData Field Corrupts Pointer Offset; Code Execution via Malicious Spreadsheet