CVE-2009-1862

Unpatched Adobe Acrobat/Reader and Flash Player RCE vulnerabilities were actively exploited in the wild, enabling remote code execution.

Adobe Acrobat, Reader, and Flash Player contained unspecified remote code execution vulnerabilities that were actively exploited in the wild. DIB organizations must ensure these products are patched immediately, as unpatched RCE flaws allow attackers to execute arbitrary code on systems, leading to data breaches and compliance violations. The high embarrassment score reflects Adobe's repeated history of critical RCE vulnerabilities in widely deployed products.

Shame score — Adobe's repeated critical RCE vulnerabilities in widely deployed products, combined with active exploitation in the wild, demonstrate a pattern of avoidable security failures that severely impact DIB compliance and trust.