Adobe Reader and Acrobat 9.x before 9.5.5, 10.x before 10.1.7, and 11.x before 11.0.03 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Actively exploited in the wild (cisa kev) and public exploit code available.
Buffer Overflow
Memory Corruption
Denial Of Service
RCE
Adobe
NVD
GitHub
Exploit-DB
VulDB
CVSS 3.1
9.8
EPSS
89.9%
Threat
7.7