CVE-2010-0188
High 7.8 Exploited in the wild (KEV) Used in ransomware campaigns
Confirmed active exploitation — CISA KEV catalog
- Name
- Adobe Reader and Acrobat Arbitrary Code Execution Vulnerability
- Added to catalog
- Remediation due date (US federal)
- Required action
- Apply updates per vendor instructions.
Description
Unspecified vulnerability in Adobe Reader and Acrobat 8.x before 8.2.1 and 9.x before 9.3.1 allows attackers to cause a denial of service (application crash) or possibly execute arbitrary code via unknown vectors.
Metrics
- CVSS 3.1
-
7.8 (HIGH)
Score source: NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - EPSS — exploit probability
- 88% (percentile: 100) as of 1 November 2026
Affected products
adobe: acrobat; adobe: acrobat reader
References
- http://secunia.com/advisories/38639 Broken LinkVendor Advisory
- http://www.adobe.com/support/security/bulletins/apsb10-07.html Broken LinkVendor Advisory
- http://www.redhat.com/support/errata/RHSA-2010-0114.html Broken LinkVendor Advisory
- http://www.vupen.com/english/advisories/2010/0399 Broken LinkVendor Advisory
- http://secunia.com/advisories/38639 Broken LinkVendor Advisory
- http://www.adobe.com/support/security/bulletins/apsb10-07.html Broken LinkVendor Advisory
- http://www.redhat.com/support/errata/RHSA-2010-0114.html Broken LinkVendor Advisory
- http://www.vupen.com/english/advisories/2010/0399 Broken LinkVendor Advisory
- http://lists.opensuse.org/opensuse-security-announce/2010-03/msg00004.html Mailing ListThird Party Advisory
- http://secunia.com/advisories/38915 Broken Link