CVE-2010-0188: Adobe Reader and Acrobat Arbitrary Code Execution Vulnerability

High severity, CVSS 7.8. Actively exploited: in CISA KEV since 2022-03-03. EPSS: 88.2% chance of exploitation in the next 30 days.

Unspecified vulnerability in Adobe Reader and Acrobat 8.x before 8.2.1 and 9.x before 9.3.1 allows attackers to cause a denial of service (application crash) or possibly execute arbitrary code via unknown vectors.

Affected products

• Adobe Acrobat: from 8.0, before 8.2.1 (fixed in 8.2.1); from 9.0, before 9.3.1 (fixed in 9.3.1)
• Adobe Acrobat Reader: from 8.0, before 8.2.1 (fixed in 8.2.1); from 9.0, before 9.3.1 (fixed in 9.3.1)

Published 2010-02-22. Last modified 2026-08-14.