Exploited Vulnerabilities DailyCVEs from 2009 known to be exploited
Entries15
Ransomware-linked1
Avg. lag14.1 yrs
Year added to KEV
| CVE | Vendor / product | Added | EPSS | Ransomware |
|---|---|---|---|---|
| CVE-2009-3459 | Adobe Acrobat and Reader | 2026-05-20 | 86.5% | Unknown |
| CVE-2009-1537 | Microsoft DirectX | 2026-05-20 | 51.2% | Unknown |
| CVE-2009-0238 | Microsoft Office | 2026-04-14 | 43.2% | Unknown |
| CVE-2009-0556 | Microsoft Office | 2026-01-07 | 67.3% | Unknown |
| CVE-2009-4324 | Adobe Acrobat and Reader | 2022-06-08 | 81.8% | Unknown |
| CVE-2009-3953 | Adobe Acrobat and Reader | 2022-06-08 | 83.2% | Unknown |
| CVE-2009-1862 | Adobe Acrobat and Reader, Flash Player | 2022-06-08 | 21.1% | Unknown |
| CVE-2009-0563 | Microsoft Office | 2022-06-08 | 62.8% | Unknown |
| CVE-2009-0557 | Microsoft Office | 2022-06-08 | 53.0% | Unknown |
| CVE-2009-2055 | Cisco IOS XR | 2022-03-25 | 3.3% | Unknown |
| CVE-2009-1151 | phpMyAdmin phpMyAdmin | 2022-03-25 | 96.5% | Unknown |
| CVE-2009-0927 | Adobe Reader and Acrobat | 2022-03-25 | 96.6% | Unknown |
| CVE-2009-3960 | Adobe BlazeDS | 2022-03-07 | 90.1% | Known |
| CVE-2009-3129 | Microsoft Excel | 2022-03-03 | 84.0% | Unknown |
| CVE-2009-1123 | Microsoft Windows | 2022-03-03 | 4.8% | Unknown |
Data from CISA's Known Exploited Vulnerabilities (KEV) catalog. EPSS is FIRST's estimated probability of exploitation activity in the next 30 days, refreshed weekly. Always follow the vendor's official guidance.
About this page
15 CVE-2009 vulnerabilities are in KEV; on average they were listed 14.1 years after the CVE year.