CVE-2010-0188
KEVRansomware UseAdobe Reader and Acrobat Arbitrary Code Execution Vulnerability
Description
Unspecified vulnerability in Adobe Reader and Acrobat allows attackers to cause a denial of service or possibly execute arbitrary code.
Unspecified vulnerability in Adobe Reader and Acrobat 8.x before 8.2.1 and 9.x before 9.3.1 allows attackers to cause a denial of service (application crash) or possibly execute arbitrary code via unknown vectors.
CVSS 3.1 vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HPublishedFeb 22, 2010
Last modifiedAug 14, 2026
Added to KEVMar 3, 2022
Remediation dueMar 24, 2022
References
- lists.opensuse.org/opensuse-security-announce/2010-03/msg00004.htmlMailing ListThird Party Advisory
- secunia.com/advisories/38639Broken LinkVendor Advisory
- secunia.com/advisories/38915Broken Link
- securitytracker.com/id?1023601Broken LinkThird Party Advisory
- adobe.com/support/security/bulletins/apsb10-07.htmlBroken LinkVendor Advisory
- redhat.com/support/errata/RHSA-2010-0114.htmlBroken LinkVendor Advisory
- securityfocus.com/bid/38195Broken LinkThird Party Advisory
- vupen.com/english/advisories/2010/0399Broken LinkVendor Advisory
- exchange.xforce.ibmcloud.com/vulnerabilities/56297Third Party AdvisoryVDB Entry
- oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8697Broken Link
- cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2010-0188US Government Resource
0 recent articles mention this CVE
88
Risk assessment · Critical
Actively exploited and used by ransomware crews. Patch immediately.
- Exploitation
- Confirmed in the wild (CISA KEV)
- Federal remediation deadline
- Overdue by 1678 days
- Ransomware
- Used in known ransomware campaigns
- CVSS
- 7.8 HIGH
- EPSS (30-day exploit probability)
- 88.2% · top 1% of all CVEs
- Weakness
- NVD-CWE-noinfo
Recommended actions
- 1.Apply updates per vendor instructions.
- 2.Treat as emergency change: patch or isolate internet-facing instances first.
- 3.Hunt for compromise: review logs for the disclosure window, not just from the patch date.
- 4.Verify offline/immutable backups and segment the affected systems. This flaw is used for ransomware initial access.
Assessment is derived automatically from the live signals above; verify against your own asset inventory.