← Vulnerability Intelligence

CVE-2008-0655

High 8.8 Exploited in the wild (KEV)

Confirmed active exploitation — CISA KEV catalog

Name: Adobe Acrobat and Reader Unspecified Vulnerability
Added to catalog: 8 June 2022
Remediation due date (US federal): 22 June 2022
Required action: Apply updates per vendor instructions.

Description

Multiple unspecified vulnerabilities in Adobe Reader and Acrobat before 8.1.2 have unknown impact and attack vectors.

Metrics

CVSS 3.1: 8.8 (HIGH) Score source: NVD CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS — exploit probability: 38% (percentile: 99) as of 1 November 2026
CWE: CWE-200

Affected products

adobe: acrobat; adobe: acrobat reader

References

http://kb.adobe.com/selfservice/viewContent.do?externalId=kb403079&sliceId=1 Vendor Advisory
http://secunia.com/advisories/28802 Broken LinkPatchVendor Advisory
http://secunia.com/advisories/28851 Broken LinkVendor Advisory
http://secunia.com/advisories/28983 Broken LinkVendor Advisory
http://secunia.com/advisories/29065 Broken LinkVendor Advisory
http://secunia.com/advisories/29205 Broken LinkVendor Advisory
http://secunia.com/advisories/30840 Broken LinkVendor Advisory
http://www.adobe.com/support/security/advisories/apsa08-01.html Vendor Advisory
http://www.adobe.com/support/security/bulletins/apsb08-13.html Vendor Advisory
http://www.vupen.com/english/advisories/2008/1966/references Broken LinkVendor Advisory