CVE-2010-0188highunder attackransomware

CVE-2010-0188

Published · Updated

Follow this CVE+ Monitor Adobe Acrobat+ Monitor Reader Mobile

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

100Vexday Risk Score

Patch now. It under exploitation confirmed by CISA and has a working public exploit.

ssvc Actcvss 7.8epss 88%
from disclosure to weapon24 days
Published on NVDFeb 21
1st PoC+24d
metasploitFeb 16
CISA KEV+4393d
What the vendors declare (VEX)

Official vendor statements in CSAF/VEX format: whether their product is affected, already fixed, or ruled out — and why. These are the vendor's assertions, not Vexday's judgment.

Red HatVEX document ↗
Fixed
6 products (12 components)
Red Hat Desktop version 4 Extras · Red Hat Enterprise Linux AS version 4 Extras · Red Hat Enterprise Linux Desktop Supplementary (v. 5) · Red Hat Enterprise Linux ES version 4 Extras · Red Hat Enterprise Linux Server Supplementary (v. 5) · and others 1
fix ↗
Action required by CISAfederal deadline: 2022-03-24

Apply updates per vendor instructions.

In short

Adobe Reader and Acrobat versions 8.x and 9.x contain an unspecified flaw that allows attackers to crash the application or potentially run malicious code by exploiting unknown attack vectors.

Technical detail

An unspecified vulnerability in Adobe Reader/Acrobat 8.x (before 8.2.1) and 9.x (before 9.3.1) allows remote code execution or denial of service through unknown vectors; exploitation likely requires user interaction with a malicious PDF or similar document.

Summary generated and translated by AI from the official description.

The full analysis of this CVE is available in Portuguese →

Unspecified vulnerability in Adobe Reader and Acrobat 8.x before 8.2.1 and 9.x before 9.3.1 allows attackers to cause a denial of service (application crash) or possibly execute arbitrary code via unknown vectors.
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Affected products
n/a · n/a
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.