https://exploit-radar.com/en/flux/categories/bureautique.xml Exploit Radar: Office, PDF and utilities The latest additions to CISA’s catalog of exploited vulnerabilities in the “Office, PDF and utilities” category (indicative classification). 2026-08-31T00:00:00Z Exploit Radar https://exploit-radar.com/en/cve/CVE-2026-81578/ CVE-2026-81578 — PaperCut NG / MF 2026-08-31T00:00:00Z Apply the patches or mitigations from PaperCut; if none are available, stop using the product. Start with internet-facing devices. CISA deadline: 14 days. Added to CISA’s catalog of exploited vulnerabilities on August 31, 2026. https://exploit-radar.com/en/cve/CVE-2026-82078/ CVE-2026-82078 — PaperCut NG / MF 2026-08-31T00:00:00Z Apply the patches or mitigations from PaperCut; if none are available, stop using the product. Start with internet-facing devices. CISA deadline: 14 days. Added to CISA’s catalog of exploited vulnerabilities on August 31, 2026. https://exploit-radar.com/en/cve/CVE-2026-8398/ CVE-2026-8398 — DAEMON Tools Lite 2026-05-27T00:00:00Z Apply the patches or mitigations from DAEMON Tools; if none are available, stop using the product. For cloud services, follow the guidance from DAEMON Tools. CISA deadline: 3 days. Added to CISA’s catalog of exploited vulnerabilities on May 27, 2026. https://exploit-radar.com/en/cve/CVE-2009-3459/ CVE-2009-3459 — Adobe Acrobat / Reader 2026-05-20T00:00:00Z Apply the patches or mitigations from Adobe; if none are available, stop using the product. For cloud services, follow the guidance from Adobe. CISA deadline: 14 days. Added to CISA’s catalog of exploited vulnerabilities on May 20, 2026. https://exploit-radar.com/en/cve/CVE-2023-27351/ CVE-2023-27351 — PaperCut NG / MF 2026-04-20T00:00:00Z Apply the patches or mitigations from PaperCut; if none are available, stop using the product. For cloud services, follow the guidance from PaperCut. CISA deadline: 14 days. Used in ransomware campaigns. Added to CISA’s catalog of exploited vulnerabilities on April 20, 2026. https://exploit-radar.com/en/cve/CVE-2009-0238/ CVE-2009-0238 — Microsoft Office 2026-04-14T00:00:00Z Apply the patches or mitigations from Microsoft; if none are available, stop using the product. For cloud services, follow the guidance from Microsoft. CISA deadline: 14 days. Added to CISA’s catalog of exploited vulnerabilities on April 14, 2026. https://exploit-radar.com/en/cve/CVE-2026-34621/ CVE-2026-34621 — Adobe Acrobat / Reader 2026-04-13T00:00:00Z Apply the patches or mitigations from Adobe; if none are available, stop using the product. For cloud services, follow the guidance from Adobe. CISA deadline: 14 days. Added to CISA’s catalog of exploited vulnerabilities on April 13, 2026. https://exploit-radar.com/en/cve/CVE-2012-1854/ CVE-2012-1854 — Microsoft Office 2026-04-13T00:00:00Z Apply the patches or mitigations from Microsoft; if none are available, stop using the product. For cloud services, follow the guidance from Microsoft. CISA deadline: 14 days. Added to CISA’s catalog of exploited vulnerabilities on April 13, 2026. https://exploit-radar.com/en/cve/CVE-2020-9715/ CVE-2020-9715 — Adobe Acrobat / Reader 2026-04-13T00:00:00Z Apply the patches or mitigations from Adobe; if none are available, stop using the product. For cloud services, follow the guidance from Adobe. CISA deadline: 14 days. Added to CISA’s catalog of exploited vulnerabilities on April 13, 2026. https://exploit-radar.com/en/cve/CVE-2025-15556/ CVE-2025-15556 — Notepad++ 2026-02-12T00:00:00Z Apply the patches or mitigations from Notepad++; if none are available, stop using the product. For cloud services, follow the guidance from Notepad++. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on February 12, 2026. https://exploit-radar.com/en/cve/CVE-2026-21514/ CVE-2026-21514 — Microsoft Office 2026-02-10T00:00:00Z Apply the patches or mitigations from Microsoft; if none are available, stop using the product. For cloud services, follow the guidance from Microsoft. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on February 10, 2026. https://exploit-radar.com/en/cve/CVE-2026-21509/ CVE-2026-21509 — Microsoft Office 2026-01-26T00:00:00Z Apply the patches or mitigations from Microsoft; if none are available, stop using the product. For cloud services, follow the guidance from Microsoft. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on January 26, 2026. https://exploit-radar.com/en/cve/CVE-2009-0556/ CVE-2009-0556 — Microsoft Office 2026-01-07T00:00:00Z Apply the patches or mitigations from Microsoft; if none are available, stop using the product. For cloud services, follow the guidance from Microsoft. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on January 7, 2026. https://exploit-radar.com/en/cve/CVE-2025-6218/ CVE-2025-6218 — RARLAB WinRAR 2025-12-09T00:00:00Z Apply the patches or mitigations from RARLAB; if none are available, stop using the product. For cloud services, follow the guidance from RARLAB. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on December 9, 2025. https://exploit-radar.com/en/cve/CVE-2007-0671/ CVE-2007-0671 — Microsoft Office 2025-08-12T00:00:00Z Apply the patches or mitigations from Microsoft; if none are available, stop using the product. For cloud services, follow the guidance from Microsoft. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on August 12, 2025. https://exploit-radar.com/en/cve/CVE-2025-8088/ CVE-2025-8088 — RARLAB WinRAR 2025-08-12T00:00:00Z Apply the patches or mitigations from RARLAB; if none are available, stop using the product. For cloud services, follow the guidance from RARLAB. CISA deadline: 21 days. Used in ransomware campaigns. Added to CISA’s catalog of exploited vulnerabilities on August 12, 2025. https://exploit-radar.com/en/cve/CVE-2023-2533/ CVE-2023-2533 — PaperCut NG / MF 2025-07-28T00:00:00Z Apply the patches or mitigations from PaperCut; if none are available, stop using the product. For cloud services, follow the guidance from PaperCut. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on July 28, 2025. https://exploit-radar.com/en/cve/CVE-2025-0411/ CVE-2025-0411 — 7-Zip 2025-02-06T00:00:00Z Apply the patches or mitigations from 7-Zip; if none are available, stop using the product. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on February 6, 2025. https://exploit-radar.com/en/cve/CVE-2024-38226/ CVE-2024-38226 — Microsoft Office 2024-09-10T00:00:00Z Apply the patches or mitigations from Microsoft; if none are available, stop using the product. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on September 10, 2024. https://exploit-radar.com/en/cve/CVE-2024-7262/ CVE-2024-7262 — Kingsoft WPS Office 2024-09-03T00:00:00Z Apply the patches or mitigations from Kingsoft; if none are available, stop using the product. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on September 3, 2024. https://exploit-radar.com/en/cve/CVE-2024-38189/ CVE-2024-38189 — Microsoft Office 2024-08-13T00:00:00Z Apply the patches or mitigations from Microsoft; if none are available, stop using the product. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on August 13, 2024. https://exploit-radar.com/en/cve/CVE-2023-21608/ CVE-2023-21608 — Adobe Acrobat / Reader 2023-10-10T00:00:00Z Apply the patches or mitigations from Adobe; if none are available, stop using the product. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on October 10, 2023. https://exploit-radar.com/en/cve/CVE-2023-36563/ CVE-2023-36563 — Microsoft WordPad 2023-10-10T00:00:00Z Apply the patches or mitigations from Microsoft; if none are available, stop using the product. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on October 10, 2023. https://exploit-radar.com/en/cve/CVE-2023-26369/ CVE-2023-26369 — Adobe Acrobat / Reader 2023-09-14T00:00:00Z Apply the patches or mitigations from Adobe; if none are available, stop using the product. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on September 14, 2023. https://exploit-radar.com/en/cve/CVE-2023-36761/ CVE-2023-36761 — Microsoft Office 2023-09-12T00:00:00Z Apply the patches or mitigations from Microsoft; if none are available, stop using the product. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on September 12, 2023. https://exploit-radar.com/en/cve/CVE-2023-38831/ CVE-2023-38831 — RARLAB WinRAR 2023-08-24T00:00:00Z Apply the patches or mitigations from RARLAB; if none are available, stop using the product. CISA deadline: 21 days. Used in ransomware campaigns. Added to CISA’s catalog of exploited vulnerabilities on August 24, 2023. https://exploit-radar.com/en/cve/CVE-2023-27350/ CVE-2023-27350 — PaperCut NG / MF 2023-04-21T00:00:00Z Apply the security update from PaperCut. CISA deadline: 21 days. Used in ransomware campaigns. Added to CISA’s catalog of exploited vulnerabilities on April 21, 2023. https://exploit-radar.com/en/cve/CVE-2023-23397/ CVE-2023-23397 — Microsoft Office 2023-03-14T00:00:00Z Apply the security update from Microsoft. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on March 14, 2023. https://exploit-radar.com/en/cve/CVE-2023-21715/ CVE-2023-21715 — Microsoft Office 2023-02-14T00:00:00Z Apply the security update from Microsoft. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on February 14, 2023. https://exploit-radar.com/en/cve/CVE-2022-30333/ CVE-2022-30333 — RARLAB UnRAR 2022-08-09T00:00:00Z Apply the security update from RARLAB. CISA deadline: 21 days. Used in ransomware campaigns. Added to CISA’s catalog of exploited vulnerabilities on August 9, 2022. https://exploit-radar.com/en/cve/CVE-2011-2462/ CVE-2011-2462 — Adobe Acrobat / Reader 2022-06-08T00:00:00Z Apply the security update from Adobe. CISA deadline: 14 days. Added to CISA’s catalog of exploited vulnerabilities on June 8, 2022. https://exploit-radar.com/en/cve/CVE-2006-2492/ CVE-2006-2492 — Microsoft Office 2022-06-08T00:00:00Z Apply the security update from Microsoft. CISA deadline: 14 days. Added to CISA’s catalog of exploited vulnerabilities on June 8, 2022. https://exploit-radar.com/en/cve/CVE-2008-0655/ CVE-2008-0655 — Adobe Acrobat / Reader 2022-06-08T00:00:00Z Apply the security update from Adobe. CISA deadline: 14 days. Added to CISA’s catalog of exploited vulnerabilities on June 8, 2022. https://exploit-radar.com/en/cve/CVE-2009-3953/ CVE-2009-3953 — Adobe Acrobat / Reader 2022-06-08T00:00:00Z Apply the security update from Adobe. CISA deadline: 14 days. Added to CISA’s catalog of exploited vulnerabilities on June 8, 2022. https://exploit-radar.com/en/cve/CVE-2018-4990/ CVE-2018-4990 — Adobe Acrobat / Reader 2022-06-08T00:00:00Z Apply the security update from Adobe. CISA deadline: 14 days. Added to CISA’s catalog of exploited vulnerabilities on June 8, 2022. https://exploit-radar.com/en/cve/CVE-2007-5659/ CVE-2007-5659 — Adobe Acrobat / Reader 2022-06-08T00:00:00Z Apply the security update from Adobe. CISA deadline: 14 days. Added to CISA’s catalog of exploited vulnerabilities on June 8, 2022. https://exploit-radar.com/en/cve/CVE-2009-0557/ CVE-2009-0557 — Microsoft Office 2022-06-08T00:00:00Z Apply the security update from Microsoft. CISA deadline: 14 days. Added to CISA’s catalog of exploited vulnerabilities on June 8, 2022. https://exploit-radar.com/en/cve/CVE-2009-0563/ CVE-2009-0563 — Microsoft Office 2022-06-08T00:00:00Z Apply the security update from Microsoft. CISA deadline: 14 days. Added to CISA’s catalog of exploited vulnerabilities on June 8, 2022. https://exploit-radar.com/en/cve/CVE-2009-4324/ CVE-2009-4324 — Adobe Acrobat / Reader 2022-06-08T00:00:00Z Apply the security update from Adobe. CISA deadline: 14 days. Added to CISA’s catalog of exploited vulnerabilities on June 8, 2022. https://exploit-radar.com/en/cve/CVE-2010-2572/ CVE-2010-2572 — Microsoft Office 2022-06-08T00:00:00Z Apply the security update from Microsoft. CISA deadline: 14 days. Added to CISA’s catalog of exploited vulnerabilities on June 8, 2022. https://exploit-radar.com/en/cve/CVE-2013-1331/ CVE-2013-1331 — Microsoft Office 2022-06-08T00:00:00Z Apply the security update from Microsoft. CISA deadline: 14 days. Added to CISA’s catalog of exploited vulnerabilities on June 8, 2022. https://exploit-radar.com/en/cve/CVE-2010-2883/ CVE-2010-2883 — Adobe Acrobat / Reader 2022-06-08T00:00:00Z Apply the security update from Adobe. CISA deadline: 14 days. Added to CISA’s catalog of exploited vulnerabilities on June 8, 2022. https://exploit-radar.com/en/cve/CVE-2014-0546/ CVE-2014-0546 — Adobe Acrobat / Reader 2022-05-25T00:00:00Z Apply the security update from Adobe. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on May 25, 2022. https://exploit-radar.com/en/cve/CVE-2013-2729/ CVE-2013-2729 — Adobe Acrobat / Reader 2022-03-28T00:00:00Z Apply the security update from Adobe. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on March 28, 2022. https://exploit-radar.com/en/cve/CVE-2015-1770/ CVE-2015-1770 — Microsoft Office 2022-03-28T00:00:00Z Apply the security update from Microsoft. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on March 28, 2022. https://exploit-radar.com/en/cve/CVE-2012-2539/ CVE-2012-2539 — Microsoft Office 2022-03-28T00:00:00Z Apply the security update from Microsoft. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on March 28, 2022. https://exploit-radar.com/en/cve/CVE-2021-38646/ CVE-2021-38646 — Microsoft Office 2022-03-28T00:00:00Z Apply the security update from Microsoft. CISA deadline: 21 days. Used in ransomware campaigns. Added to CISA’s catalog of exploited vulnerabilities on March 28, 2022. https://exploit-radar.com/en/cve/CVE-2009-0927/ CVE-2009-0927 — Adobe Acrobat / Reader 2022-03-25T00:00:00Z Apply the security update from Adobe. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on March 25, 2022. https://exploit-radar.com/en/cve/CVE-2013-3346/ CVE-2013-3346 — Adobe Acrobat / Reader 2022-03-03T00:00:00Z Apply the security update from Adobe. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on March 3, 2022. https://exploit-radar.com/en/cve/CVE-2012-1856/ CVE-2012-1856 — Microsoft Office 2022-03-03T00:00:00Z Apply the security update from Microsoft. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on March 3, 2022.