{"metadata": {"vulnerability": "CVE-2009-3459", "count": 76, "kinds": {"milestone": 6, "sighting": 18, "kev": 11, "other": 41}}, "data": [{"timestamp": "2009-09-29T00:00:00Z", "date_only": false, "value": "2009-09-29T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2009-3459", "field": "cveMetadata.dateReserved"}, {"timestamp": "2009-10-08T00:00:00Z", "date_only": false, "value": "2009-10-08T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2009:1499", "record": "RHSA-2009:1499", "field": "vulnerabilities.16.discovery_date", "metric_role": "discovery", "metric_basis": "recorded_event"}, {"timestamp": "2009-10-08T00:00:00Z", "date_only": false, "value": "2009-10-08T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2009_1499", "record": "RHSA-2009_1499", "field": "vulnerabilities.16.discovery_date", "metric_role": "discovery", "metric_basis": "recorded_event"}, {"timestamp": "2009-10-08T00:00:00Z", "date_only": false, "value": "2009-10-08T00:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / adobe", "record": "CVE-2009-3459", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2009-10-08T00:00:00Z", "date_only": false, "value": "2009-10-08T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2009:1499", "record": "RHSA-2009:1499", "field": "vulnerabilities.16.release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2009-10-08T00:00:00Z", "date_only": false, "value": "2009-10-08T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2009_1499", "record": "RHSA-2009_1499", "field": "vulnerabilities.16.release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2009-10-09T00:00:00Z", "date_only": false, "value": "2009-10-09T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_alerte \u00b7 CERTA-2009-ALE-018", "record": "CERTA-2009-ALE-018", "field": "revisions.0.revision_date"}, {"timestamp": "2009-10-12T00:00:00Z", "date_only": false, "value": "2009-10-12T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2009:1499", "record": "RHSA-2009:1499", "field": "vulnerabilities.2.discovery_date"}, {"timestamp": "2009-10-12T00:00:00Z", "date_only": false, "value": "2009-10-12T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2009_1499", "record": "RHSA-2009_1499", "field": "vulnerabilities.2.discovery_date"}, {"timestamp": "2009-10-13T00:00:00Z", "date_only": false, "value": "2009-10-13T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2009:1499", "record": "RHSA-2009:1499", "field": "vulnerabilities.0.discovery_date"}, {"timestamp": "2009-10-13T00:00:00Z", "date_only": false, "value": "2009-10-13T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2009_1499", "record": "RHSA-2009_1499", "field": "vulnerabilities.0.discovery_date"}, {"timestamp": "2009-10-13T00:00:00Z", "date_only": false, "value": "2009-10-13T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2009:1499", "record": "RHSA-2009:1499", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2009-10-13T00:00:00Z", "date_only": false, "value": "2009-10-13T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2009_1499", "record": "RHSA-2009_1499", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2009-10-13T10:00:00Z", "date_only": false, "value": "2009-10-13T10:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "kevintel", "record": "CVE-2009-3459", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "fa81ed57-1876-43c8-b8ae-a3f67d69268b", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2009-10-13T10:00:00Z", "date_only": false, "value": "2009-10-13T10:00:00.000Z", "kind": "kev", "label": "Catalog added", "source": "kevintel", "record": "CVE-2009-3459", "field": "evidence.0.details.added_date", "uuid": "fa81ed57-1876-43c8-b8ae-a3f67d69268b", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2009-10-13T10:00:00Z", "date_only": false, "value": "2009-10-13T10:00:00+00:00", "kind": "kev", "label": "First seen", "source": "kevintel", "record": "CVE-2009-3459", "field": "timestamps.first_seen_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "fa81ed57-1876-43c8-b8ae-a3f67d69268b", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2009-10-13T10:00:00Z", "date_only": false, "value": "2009-10-13T10:00:00.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2009-3459", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2009-10-13T10:00:00Z", "date_only": false, "value": "2009-10-13T10:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "kevintel", "record": "CVE-2009-3459", "field": "status.status_updated_at", "uuid": "fa81ed57-1876-43c8-b8ae-a3f67d69268b", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2009-10-13T10:30:00Z", "date_only": false, "value": "2009-10-13T10:30:00Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-Q52P-3M33-W676", "record": "GHSA-Q52P-3M33-W676", "field": "database_specific.nvd_published_at"}, {"timestamp": "2009-10-13T10:30:00Z", "date_only": false, "value": "2009-10-13T10:30Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2009-3459", "record": "GSD-2009-3459", "field": "namespaces.nvd.nist.gov.publishedDate"}, {"timestamp": "2009-10-13T10:30:00.577Z", "date_only": false, "value": "2009-10-13T10:30:00.577", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2009-3459", "record": "FKIE_CVE-2009-3459", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2009-10-14T00:00:00Z", "date_only": false, "value": "2009-10-14T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_alerte \u00b7 CERTA-2009-ALE-018", "record": "CERTA-2009-ALE-018", "field": "revisions.1.revision_date"}, {"timestamp": "2009-10-14T00:00:00Z", "date_only": false, "value": "2009-10-14T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTA-2009-AVI-445", "record": "CERTA-2009-AVI-445", "field": "revisions.0.revision_date"}, {"timestamp": "2009-10-14T11:36:28Z", "date_only": false, "value": "2009-10-14T11:36:28+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2009:1499", "record": "RHSA-2009:1499", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2009-10-14T11:36:28Z", "date_only": false, "value": "2009-10-14T11:36:28+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2009_1499", "record": "RHSA-2009_1499", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2009-10-14T15:36:00Z", "date_only": false, "value": "2009-10-14T15:36:00+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2009:1499", "record": "RHSA-2009:1499", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2009-10-14T15:36:00Z", "date_only": false, "value": "2009-10-14T15:36:00+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2009_1499", "record": "RHSA-2009_1499", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2009-10-14T15:36:00Z", "date_only": false, "value": "2009-10-14T15:36:00+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2009:1499", "record": "RHSA-2009:1499", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2009-10-14T15:36:00Z", "date_only": false, "value": "2009-10-14T15:36:00+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2009_1499", "record": "RHSA-2009_1499", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2009-10-14T15:36:00Z", "date_only": false, "value": "2009-10-14T15:36:00+00:00", "kind": "other", "label": "Vendor fix", "source": "csaf_redhat \u00b7 RHSA-2009:1499", "record": "RHSA-2009:1499", "field": "vulnerabilities.16.remediations.0.date", "metric_role": "patch", "metric_basis": "recorded_event"}, {"timestamp": "2009-10-14T15:36:00Z", "date_only": false, "value": "2009-10-14T15:36:00+00:00", "kind": "other", "label": "Vendor fix", "source": "csaf_redhat \u00b7 RHSA-2009_1499", "record": "RHSA-2009_1499", "field": "vulnerabilities.16.remediations.0.date", "metric_role": "patch", "metric_basis": "recorded_event"}, {"timestamp": "2010-09-20T00:00:00Z", "date_only": false, "value": "2010-09-20T00:00:00.000000Z", "kind": "sighting", "label": "Confirmed", "source": "https://www.exploit-db.com/exploits/16546", "record": "CVE-2009-3459", "field": "creation_timestamp", "uuid": "96ad0de9-cac8-4f92-9e2b-009cb6378ac4", "url": "https://www.exploit-db.com/exploits/16546"}, {"timestamp": "2010-09-25T00:00:00Z", "date_only": false, "value": "2010-09-25T00:00:00.000000Z", "kind": "sighting", "label": "Confirmed", "source": "https://www.exploit-db.com/exploits/16652", "record": "CVE-2009-3459", "field": "creation_timestamp", "uuid": "e8f1a03b-c833-426d-a359-acd5bf2063c0", "url": "https://www.exploit-db.com/exploits/16652"}, {"timestamp": "2017-09-18T12:57:01Z", "date_only": false, "value": "2017-09-18T12:57:01.000Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / adobe", "record": "CVE-2009-3459", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2018-05-29T15:50:33Z", "date_only": false, "value": "2018-05-29T15:50:33.000000Z", "kind": "sighting", "label": "Seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/browser/adobe_flatedecode_predictor02.rb", "record": "CVE-2009-3459", "field": "creation_timestamp", "uuid": "fae27742-4d48-4623-8999-08249c779a5d", "url": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/browser/adobe_flatedecode_predictor02.rb"}, {"timestamp": "2018-05-29T15:50:33Z", "date_only": false, "value": "2018-05-29T15:50:33.000000Z", "kind": "sighting", "label": "Seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/fileformat/adobe_flatedecode_predictor02.rb", "record": "CVE-2009-3459", "field": "creation_timestamp", "uuid": "c3b5f017-3c85-43be-ad5c-677658e20245", "url": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/fileformat/adobe_flatedecode_predictor02.rb"}, {"timestamp": "2018-10-30T16:25:00Z", "date_only": false, "value": "2018-10-30T16:25Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2009-3459", "record": "GSD-2009-3459", "field": "namespaces.nvd.nist.gov.lastModifiedDate"}, {"timestamp": "2022-05-02T03:45:27Z", "date_only": false, "value": "2022-05-02T03:45:27Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-Q52P-3M33-W676", "record": "GHSA-Q52P-3M33-W676", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2023-12-13T01:19:48.938Z", "date_only": false, "value": "2023-12-13T01:19:48.938367Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2009-3459", "record": "GSD-2009-3459", "field": "gsd.osvSchema.modified"}, {"timestamp": "2024-08-07T06:31:10.547Z", "date_only": false, "value": "2024-08-07T06:31:10.547Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2009-3459", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-11-14T10:46:35Z", "date_only": false, "value": "2024-11-14T10:46:35+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2009_1499", "record": "RHSA-2009_1499", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2024-11-14T10:46:35Z", "date_only": false, "value": "2024-11-14T10:46:35+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2009_1499", "record": "RHSA-2009_1499", "field": "document.tracking.generator.date"}, {"timestamp": "2024-11-14T10:46:35Z", "date_only": false, "value": "2024-11-14T10:46:35+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2009_1499", "record": "RHSA-2009_1499", "field": "document.tracking.current_release_date"}, {"timestamp": "2025-02-06T03:13:39Z", "date_only": false, "value": "2025-02-06T03:13:39.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "record": "CVE-2009-3459", "field": "creation_timestamp", "uuid": "e6a14459-a6ae-4f88-aa10-b6d6b70523ab"}, {"timestamp": "2025-02-23T04:08:40Z", "date_only": false, "value": "2025-02-23T04:08:40.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "record": "CVE-2009-3459", "field": "creation_timestamp", "uuid": "b095c7b6-1b01-4ead-b83e-ae6cc953cdad"}, {"timestamp": "2025-08-31T03:01:13Z", "date_only": false, "value": "2025-08-31T03:01:13.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/ab0b745f-bbd5-338e-8b92-97dd0c757e9d", "record": "CVE-2009-3459", "field": "creation_timestamp", "uuid": "5e768b91-2a30-456d-a797-92a675ddfe7f"}, {"timestamp": "2025-08-31T03:12:50Z", "date_only": false, "value": "2025-08-31T03:12:50.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/d17bd6ef-d68b-317b-ac33-cdbc44c5fc57", "record": "CVE-2009-3459", "field": "creation_timestamp", "uuid": "f3a9e9e1-47e8-41ea-aa6e-2ff04f6f5bf5"}, {"timestamp": "2026-05-20T00:00:00Z", "date_only": false, "value": "2026-05-20T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "cisa-kev", "record": "CVE-2009-3459", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "16d37892-3a02-4a52-80e4-fe85730f9d88", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-05-20T00:00:00Z", "date_only": true, "value": "2026-05-20", "kind": "other", "label": "Catalog added", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2009-3459", "field": "containers.adp.1.metrics.2.other.content.dateAdded"}, {"timestamp": "2026-05-20T00:00:00Z", "date_only": true, "value": "2026-05-20", "kind": "kev", "label": "Date added", "source": "cisa-kev", "record": "CVE-2009-3459", "field": "evidence.0.details.date_added", "uuid": "16d37892-3a02-4a52-80e4-fe85730f9d88", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-05-20T00:00:00Z", "date_only": false, "value": "2026-05-20T00:00:00+00:00", "kind": "other", "label": "Exploit status", "source": "csaf_redhat \u00b7 RHSA-2009:1499", "record": "RHSA-2009:1499", "field": "vulnerabilities.16.threats.0.date"}, {"timestamp": "2026-05-20T00:00:00Z", "date_only": false, "value": "2026-05-20T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "cisa-kev", "record": "CVE-2009-3459", "field": "timestamps.first_seen_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "16d37892-3a02-4a52-80e4-fe85730f9d88", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-05-20T00:00:00Z", "date_only": false, "value": "2026-05-20T00:00:00+00:00", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2009-3459", "field": "containers.adp.1.metrics.1.other.content.timestamp"}, {"timestamp": "2026-05-20T00:00:00Z", "date_only": false, "value": "2026-05-20T00:00:00+00:00", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2009-3459", "record": "FKIE_CVE-2009-3459", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-05-20T00:00:00Z", "date_only": false, "value": "2026-05-20T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "cisa-kev", "record": "CVE-2009-3459", "field": "status.status_updated_at", "uuid": "16d37892-3a02-4a52-80e4-fe85730f9d88", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-05-20T00:00:00Z", "date_only": false, "value": "2026-05-20T00:00:00.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2009-3459", "field": "containers.adp.1.timeline.0.time"}, {"timestamp": "2026-05-20T17:22:01.478Z", "date_only": false, "value": "2026-05-20T17:22:01.478941Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cvesentinel.bsky.social/post/3mmcg6ds2r42s", "record": "CVE-2009-3459", "field": "creation_timestamp", "uuid": "3bcd7bc6-9fca-4a9d-b3fa-d5c2c536780f", "content": "\ud83d\uded1 CVE-2009-3459\nAdobe Acrobat and Reader\nEPSS 87% / KEV\nTL;DR: Heap-based buffer overflow in Adobe Reader and Acrobat 7.x before 7.1.4, 8.x before 8.1.7, \u2026\nhttps://cvesentinel.replit.app/report/CVE-2009-3459?utm_source=bluesky&utm_medium=social&utm_campaign=cvesentinel\n#infosec #CVE #vulnerability", "url": "https://bsky.app/profile/cvesentinel.bsky.social/post/3mmcg6ds2r42s"}, {"timestamp": "2026-05-20T18:00:02Z", "date_only": false, "value": "2026-05-20T18:00:02+00:00", "kind": "kev", "label": "Recorded", "source": "cisa-kev", "record": "CVE-2009-3459", "field": "timestamps.recorded_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "16d37892-3a02-4a52-80e4-fe85730f9d88", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-05-20T18:00:02.624Z", "date_only": false, "value": "2026-05-20T18:00:02.624614Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/16d37892-3a02-4a52-80e4-fe85730f9d88", "record": "CVE-2009-3459", "field": "creation_timestamp", "uuid": "deb09710-0150-420a-b0a2-7a4388967713", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/16d37892-3a02-4a52-80e4-fe85730f9d88", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-05-20T18:31:27Z", "date_only": false, "value": "2026-05-20T18:31:27Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-Q52P-3M33-W676", "record": "GHSA-Q52P-3M33-W676", "field": "modified"}, {"timestamp": "2026-05-20T21:13:36.661Z", "date_only": false, "value": "2026-05-20T21:13:36.661498Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/secdb/statuses/116608677530202595", "record": "CVE-2009-3459", "field": "creation_timestamp", "uuid": "39973e0b-1bb5-4133-916e-d59067549816", "content": "\ud83d\udea8 [CISA-2026:0520] CISA Adds 7 Known Exploited Vulnerabilities to Catalog (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0520)\nCISA has added 7 new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. These types of vulnerabilities are a frequent attack vector for malicious cyber actors and pose significant risk to the federal enterprise.\n\u26a0\ufe0f CVE-2008-4250 (https://secdb.nttzen.cloud/cve/detail/CVE-2008-4250)- Name: Microsoft Windows Buffer Overflow Vulnerability- Action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.- Known To Be Used in Ransomware Campaigns? Unknown- Vendor: Microsoft- Product: Windows- Notes: https://learn.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-067 ; https://nvd.nist.gov/vuln/detail/CVE-2008-4250\n\u26a0\ufe0f CVE-2009-1537 (https://secdb.nttzen.cloud/cve/detail/CVE-2009-1537)- Name: Microsoft DirectX NULL Byte Overwrite Vulnerability- Action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.- Known To Be Used in Ransomware Campaigns? Unknown- Vendor: Microsoft- Product: DirectX- Notes: https://learn.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-028 ; https://nvd.nist.gov/vuln/detail/CVE-2009-1537\n\u26a0\ufe0f CVE-2009-3459 (https://secdb.nttzen.cloud/cve/detail/CVE-2009-3459)- Name: Adobe Acrobat and Reader Heap-Based Buffer Overflow Vulnerability- Action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.- Known To Be Used in Ransomware Campaigns? Unknown- Vendor: Adobe- Product: Acrobat and Reader- Notes: https://www.cisa.gov/news-events/alerts/2009/10/13/adobe-reader-and-acrobat-vulnerabilities ; https://web.archive.org/web/20120324170253/http://www.adobe.com/support/security/bulletins/apsb09-15.html#:~:text=CVE%2D2009%2D3459).-,NOTE%3A,-There%20are%20reports ; https://nvd.nist.gov/vuln/detail/CVE-2009-3459\n\u26a0\ufe0f CVE-2010-0249 (https://secdb.nttzen.cloud/cve/detail/CVE-2010-0249)- Name: Microsoft Internet Explorer Use-After-Free Vulnerability- Action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.- Known To Be Used in Ransomware Campaigns? Unknown- Vendor: Microsoft- Product: Internet Explorer- Notes: https://learn.microsoft.com/en-us/security-updates/SecurityAdvisories/2010/979352 ; https://nvd.nist.gov/vuln/detail/CVE-2010-0249\n\u26a0\ufe0f CVE-2010-0806 (https://secdb.nttzen.cloud/cve/detail/CVE-2010-0806)- Name: Microsoft Internet Explorer Use-After-Free Vulnerability- Action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.- Known To Be Used in Ransomware Campaigns? Unknown- Vendor: Microsoft- Product: Internet Explorer- Notes: https://learn.microsoft.com/en-us/security-updates/securityadvisories/2010/981374 ; https://nvd.nist.gov/vuln/detail/CVE-2010-0806\n\u26a0\ufe0f CVE-2026-41091 (https://secdb.nttzen.cloud/cve/detail/CVE-2026-41091)- Name: Microsoft Defender Link Following Vulnerability- Action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.- Known To Be Used in Ransomware Campaigns? Unknown- Vendor: Microsoft- Product: Defender- Notes: https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-41091 ; https://nvd.nist.gov/vuln/detail/CVE-2026-41091\n\u26a0\ufe0f CVE-2026-45498 (https://secdb.nttzen.cloud/cve/detail/CVE-2026-45498)- Name: Microsoft Defender Denial of Service Vulnerability- Action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.- Known To Be Used in Ransomware Campaigns? Unknown- Vendor: Microsoft- Product: Defender- Notes: https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-45498 ; https://nvd.nist.gov/vuln/detail/CVE-2026-45498\n#SecDB #InfoSec #CVE #CISA_KEV #cisa_20260520 #cisa20260520 #cve_2008_4250 #cve_2009_1537 #cve_2009_3459 #cve_2010_0249 #cve_2010_0806 #cve_2026_41091 #cve_2026_45498 #cve20084250 #cve20091537 #cve20093459 #cve20100249 #cve20100806 #cve202641091 #cve202645498", "url": "https://infosec.exchange/users/secdb/statuses/116608677530202595"}, {"timestamp": "2026-05-21T03:55:27.999Z", "date_only": false, "value": "2026-05-21T03:55:27.999Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2009-3459", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-05-21T03:55:27.999Z", "date_only": false, "value": "2026-05-21T03:55:27.999Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2009-3459", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2026-05-22T20:41:08.792Z", "date_only": false, "value": "2026-05-22T20:41:08.792296Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/shortinfo.bsky.social/post/3mmhsaa4nxj2i", "record": "CVE-2009-3459", "field": "creation_timestamp", "uuid": "70c997f5-0305-4a8c-9729-910f4f26bf0b", "content": "The oldest five still being exploited: CVE-2008-4250 (Windows), CVE-2009-1537 (DirectX), CVE-2009-3459 (Adobe Reader), CVE-2010-0249 and CVE-2010-0806 (Internet Explorer). All five were added on May 20.", "url": "https://bsky.app/profile/shortinfo.bsky.social/post/3mmhsaa4nxj2i"}, {"timestamp": "2026-05-25T08:04:09.784Z", "date_only": false, "value": "2026-05-25T08:04:09.784884Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/shortinfo.bsky.social/post/3mmnzdevzpf2r", "record": "CVE-2009-3459", "field": "creation_timestamp", "uuid": "a7d41bc7-6294-4513-a034-0c4720c27f96", "content": "Oldest CVEs in this batch: CVE-2008-4250 (Microsoft), CVE-2009-1537 (Microsoft), CVE-2009-3459 (Adobe), CVE-2010-0249 (Microsoft), CVE-2010-0806 (Microsoft).", "url": "https://bsky.app/profile/shortinfo.bsky.social/post/3mmnzdevzpf2r"}, {"timestamp": "2026-06-01T08:04:25.436Z", "date_only": false, "value": "2026-06-01T08:04:25.436557Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/shortinfo.bsky.social/post/3mn7mmcjrmx2v", "record": "CVE-2009-3459", "field": "creation_timestamp", "uuid": "32c742ad-10e4-436b-8b50-09c00e21c7e5", "content": "Oldest CVEs in this batch: CVE-2008-4250 (Microsoft), CVE-2009-1537 (Microsoft), CVE-2009-3459 (Adobe), CVE-2010-0249 (Microsoft), CVE-2010-0806 (Microsoft).", "url": "https://bsky.app/profile/shortinfo.bsky.social/post/3mn7mmcjrmx2v"}, {"timestamp": "2026-06-03T00:00:00Z", "date_only": true, "value": "2026-06-03", "kind": "kev", "label": "Due date", "source": "cisa-kev", "record": "CVE-2009-3459", "field": "evidence.0.details.due_date", "uuid": "16d37892-3a02-4a52-80e4-fe85730f9d88", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-08T08:05:03.624Z", "date_only": false, "value": "2026-06-08T08:05:03.624216Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/shortinfo.bsky.social/post/3mnr7vvc4p52j", "record": "CVE-2009-3459", "field": "creation_timestamp", "uuid": "8f1473c8-2921-4db2-919b-32c93201e705", "content": "Oldest CVEs in this batch: CVE-2008-4250 (Microsoft), CVE-2009-1537 (Microsoft), CVE-2009-3459 (Adobe), CVE-2010-0249 (Microsoft), CVE-2010-0806 (Microsoft).", "url": "https://bsky.app/profile/shortinfo.bsky.social/post/3mnr7vvc4p52j"}, {"timestamp": "2026-06-15T08:05:43.718Z", "date_only": false, "value": "2026-06-15T08:05:43.718054Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/shortinfo.bsky.social/post/3moct7ju2se2q", "record": "CVE-2009-3459", "field": "creation_timestamp", "uuid": "15136248-a4de-4b4d-a04e-a3a3aa6728ac", "content": "Oldest CVEs in this batch: CVE-2008-4250 (Microsoft), CVE-2009-1537 (Microsoft), CVE-2009-3459 (Adobe), CVE-2010-0249 (Microsoft), CVE-2010-0806 (Microsoft).", "url": "https://bsky.app/profile/shortinfo.bsky.social/post/3moct7ju2se2q"}, {"timestamp": "2026-06-16T23:11:38.727Z", "date_only": false, "value": "2026-06-16T23:11:38.727", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2009-3459", "record": "FKIE_CVE-2009-3459", "field": "lastModified"}, {"timestamp": "2026-06-19T16:45:39.902Z", "date_only": false, "value": "2026-06-19T16:45:39.902277Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/de87d7ac-d4f5-4bae-bcfa-55557f67a716", "record": "CVE-2009-3459", "field": "creation_timestamp", "uuid": "09033645-7490-497f-bb33-acdf8bffb9fc", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/de87d7ac-d4f5-4bae-bcfa-55557f67a716", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-06-23T14:02:37Z", "date_only": false, "value": "2026-06-23T14:02:37+00:00", "kind": "kev", "label": "Recorded", "source": "kevintel", "record": "CVE-2009-3459", "field": "timestamps.recorded_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "fa81ed57-1876-43c8-b8ae-a3f67d69268b", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-23T14:04:11.658Z", "date_only": false, "value": "2026-06-23T14:04:11.658395Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/fa81ed57-1876-43c8-b8ae-a3f67d69268b", "record": "CVE-2009-3459", "field": "creation_timestamp", "uuid": "d48b394f-b058-461e-88f6-db25017e6624", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/fa81ed57-1876-43c8-b8ae-a3f67d69268b", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-06-28T12:16:25Z", "date_only": false, "value": "2026-06-28T12:16:25+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2009:1499", "record": "RHSA-2009:1499", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-06-28T12:16:25Z", "date_only": false, "value": "2026-06-28T12:16:25+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2009:1499", "record": "RHSA-2009:1499", "field": "document.tracking.generator.date"}, {"timestamp": "2026-06-28T12:16:25Z", "date_only": false, "value": "2026-06-28T12:16:25+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2009:1499", "record": "RHSA-2009:1499", "field": "document.tracking.current_release_date"}], "metrics": {"as_of": "2026-10-29T07:43:43.147Z", "anchors": {"origin": {"timestamp": "2009-10-08T00:00:00Z", "date_only": false, "value": "2009-10-08T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2009:1499", "record": "RHSA-2009:1499", "field": "vulnerabilities.16.discovery_date", "metric_role": "discovery", "metric_basis": "recorded_event"}, "discovery": {"timestamp": "2009-10-08T00:00:00Z", "date_only": false, "value": "2009-10-08T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2009:1499", "record": "RHSA-2009:1499", "field": "vulnerabilities.16.discovery_date", "metric_role": "discovery", "metric_basis": "recorded_event"}, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2009-10-08T00:00:00Z", "date_only": false, "value": "2009-10-08T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2009:1499", "record": "RHSA-2009:1499", "field": "vulnerabilities.16.release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": null, "exploitation": {"timestamp": "2009-10-13T10:00:00Z", "date_only": false, "value": "2009-10-13T10:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "kevintel", "record": "CVE-2009-3459", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "fa81ed57-1876-43c8-b8ae-a3f67d69268b", "status": {"status_reason": "confirmed", "exploited": true}}, "patch": {"timestamp": "2009-10-14T15:36:00Z", "date_only": false, "value": "2009-10-14T15:36:00+00:00", "kind": "other", "label": "Vendor fix", "source": "csaf_redhat \u00b7 RHSA-2009:1499", "record": "RHSA-2009:1499", "field": "vulnerabilities.16.remediations.0.date", "metric_role": "patch", "metric_basis": "recorded_event"}}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": true, "seconds": 468000.0, "hours": 130.0, "days": 5.416666666666667, "min_seconds": 381600.0, "max_seconds": 468000.0, "approximate": true, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2009-10-08T00:00:00Z", "date_only": false, "value": "2009-10-08T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2009:1499", "record": "RHSA-2009:1499", "field": "vulnerabilities.16.discovery_date", "metric_role": "discovery", "metric_basis": "recorded_event"}, "end": {"timestamp": "2009-10-13T10:00:00Z", "date_only": false, "value": "2009-10-13T10:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "kevintel", "record": "CVE-2009-3459", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "fa81ed57-1876-43c8-b8ae-a3f67d69268b", "status": {"status_reason": "confirmed", "exploited": true}}}, "disclosure_to_exploit": {"available": true, "seconds": 468000.0, "hours": 130.0, "days": 5.416666666666667, "min_seconds": 381600.0, "max_seconds": 468000.0, "approximate": true, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2009-10-08T00:00:00Z", "date_only": false, "value": "2009-10-08T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2009:1499", "record": "RHSA-2009:1499", "field": "vulnerabilities.16.release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2009-10-13T10:00:00Z", "date_only": false, "value": "2009-10-13T10:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "kevintel", "record": "CVE-2009-3459", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "fa81ed57-1876-43c8-b8ae-a3f67d69268b", "status": {"status_reason": "confirmed", "exploited": true}}}, "disclosure_to_exploit_publication": {"available": false, "missing": ["end"]}, "time_to_patch": {"available": false, "missing": ["start"]}, "total_time_to_patch": {"available": true, "seconds": 574560.0, "hours": 159.6, "days": 6.65, "min_seconds": 488160.0, "max_seconds": 574560.0, "approximate": true, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2009-10-08T00:00:00Z", "date_only": false, "value": "2009-10-08T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2009:1499", "record": "RHSA-2009:1499", "field": "vulnerabilities.16.discovery_date", "metric_role": "discovery", "metric_basis": "recorded_event"}, "end": {"timestamp": "2009-10-14T15:36:00Z", "date_only": false, "value": "2009-10-14T15:36:00+00:00", "kind": "other", "label": "Vendor fix", "source": "csaf_redhat \u00b7 RHSA-2009:1499", "record": "RHSA-2009:1499", "field": "vulnerabilities.16.remediations.0.date", "metric_role": "patch", "metric_basis": "recorded_event"}}, "disclosure_to_patch": {"available": true, "seconds": 574560.0, "hours": 159.6, "days": 6.65, "min_seconds": 488160.0, "max_seconds": 574560.0, "approximate": true, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2009-10-08T00:00:00Z", "date_only": false, "value": "2009-10-08T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2009:1499", "record": "RHSA-2009:1499", "field": "vulnerabilities.16.release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2009-10-14T15:36:00Z", "date_only": false, "value": "2009-10-14T15:36:00+00:00", "kind": "other", "label": "Vendor fix", "source": "csaf_redhat \u00b7 RHSA-2009:1499", "record": "RHSA-2009:1499", "field": "vulnerabilities.16.remediations.0.date", "metric_role": "patch", "metric_basis": "recorded_event"}}, "time_unpatched": {"available": true, "seconds": 574560.0, "hours": 159.6, "days": 6.65, "min_seconds": 488160.0, "max_seconds": 574560.0, "approximate": true, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2009-10-08T00:00:00Z", "date_only": false, "value": "2009-10-08T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2009:1499", "record": "RHSA-2009:1499", "field": "vulnerabilities.16.discovery_date", "metric_role": "discovery", "metric_basis": "recorded_event"}, "end": {"timestamp": "2009-10-14T15:36:00Z", "date_only": false, "value": "2009-10-14T15:36:00+00:00", "kind": "other", "label": "Vendor fix", "source": "csaf_redhat \u00b7 RHSA-2009:1499", "record": "RHSA-2009:1499", "field": "vulnerabilities.16.remediations.0.date", "metric_role": "patch", "metric_basis": "recorded_event"}}, "exploitation_to_patch": {"available": true, "seconds": 106560.0, "hours": 29.6, "days": 1.2333333333333334, "min_seconds": 106560.0, "max_seconds": 106560.0, "approximate": false, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2009-10-13T10:00:00Z", "date_only": false, "value": "2009-10-13T10:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "kevintel", "record": "CVE-2009-3459", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "fa81ed57-1876-43c8-b8ae-a3f67d69268b", "status": {"status_reason": "confirmed", "exploited": true}}, "end": {"timestamp": "2009-10-14T15:36:00Z", "date_only": false, "value": "2009-10-14T15:36:00+00:00", "kind": "other", "label": "Vendor fix", "source": "csaf_redhat \u00b7 RHSA-2009:1499", "record": "RHSA-2009:1499", "field": "vulnerabilities.16.remediations.0.date", "metric_role": "patch", "metric_basis": "recorded_event"}}, "exploit_publication_to_patch": {"available": false, "missing": ["start"]}}}