$ cve CVE-2010-0188 JSON

CVE-2010-0188 KEV EXPLOIT

7.8

HIGH · CVSS 3.1 · EPSS 88.2% (pctl 100)

Patch first

On CISA KEV — known exploited in the wild, due 2022-03-24.

Description

Unspecified vulnerability in Adobe Reader and Acrobat 8.x before 8.2.1 and 9.x before 9.3.1 allows attackers to cause a denial of service (application crash) or possibly execute arbitrary code via unknown vectors.

Scoring

CVSS	7.8 (HIGH, v3.1)
Vector	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS	88.25% — more likely to be exploited than 100% of all CVEs
On CISA KEV	yes — remediate by 2022-03-24
Public exploit	yes
Published	2010-02-22
Last modified	2026-08-14

CISA KEV

Name	Adobe Reader and Acrobat Arbitrary Code Execution Vulnerability
Added	2022-03-03
Due	2022-03-24
Vendor / product	Adobe / Reader and Acrobat
Ransomware use	known

Affected (2)

Vendor	Product
adobe	acrobat
adobe	acrobat reader

Public exploits

Source	Title	Date
exploit-db	Apple iOS Mobile Safari - LibTIFF Buffer Overflow (Metasploit)	2012-10-09
exploit-db	Apple iOS Mobile Mail - LibTIFF Buffer Overflow (Metasploit)	2012-10-09
exploit-db	Adobe Acrobat - Bundled LibTIFF Integer Overflow (Metasploit)	2010-09-25
exploit-db	Adobe Reader PDF - LibTiff Integer Overflow Code Execution	2010-03-17

References

→ the Explorer · watch your stack · NVD