CVE-2010-0188

Adobe Reader and Acrobat — Adobe Reader and Acrobat Arbitrary Code Execution Vulnerability
⚠️ CVSS 3.1  7.8 / 10 — HIGH 🔴 CISA Known Exploited Vulnerability

Overview

Unspecified vulnerability in Adobe Reader and Acrobat allows attackers to cause a denial of service or possibly execute arbitrary code.

https://nvd.nist.gov/vuln/detail/CVE-2010-0188

Key Details

PropertyValue
CVE ID CVE-2010-0188
Vendor / Product Adobe — Reader and Acrobat
NVD Published2010-02-22
NVD Last Modified2025-10-22
CVSS 3.1 Score7.8
CVSS 3.1 VectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
SeverityHIGH
CISA KEV Added2022-03-03
CISA KEV Deadline2022-03-24
Known Ransomware Use ⚠️ Yes

CVSS 3.1 Breakdown

Attack Vector
Local
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High

Required Action

CISA BOD 22-01 Deadline: 2022-03-24. Apply updates per vendor instructions.

Timeline

DateEvent
2022-03-03Added to CISA Known Exploited Vulnerabilities catalog
2022-03-24CISA BOD 22-01 remediation deadline

References

ResourceType
NVD — CVE-2010-0188 Vulnerability Database
CISA KEV Catalog Entry US Government