Attackers Hit New Adobe Reader, Acrobat Flaw
Summary: Adobe warned that a previously unknown critical flaw in Adobe Reader X (10.1.1) and earlier, Acrobat X (10.1.1) and earlier, and Reader 9.4.6 and earlier 9.x versions was being actively exploited in limited, targeted attacks in the wild against Adobe Reader 9.x on Windows. Adobe said it would ship an emergency update for Reader 9.x and Acrobat 9.x on Windows no later than the week of Dec. 12, but would not fix Reader X and Acrobat X until its next quarterly update on Jan. 10, 2012, citing Protected Mode and Protected View as preventing exploits from executing.
What you should know: Adobe left Reader X and Acrobat X unpatched until Jan. 10, 2012, and the advisory notes that Protected Mode must be enabled in the security options for Reader and Acrobat X to be secure against this flaw - so any deployment running with that setting off carried the exposure through the holidays.
Read the original at Krebs on Security ↗
- Topics
- Zero-Days & Exploits
- Related
- New Sign Drop Exploit Can Abuse Windows Defender to Bypass Security Protections Cyber Risks · Nov 13, 2026New Sign Drop Zero-Day Exploit Turns Windows CLFS Security Feature Into SYSTEM Access Cyber Risks · Nov 12, 2026November Patch Tuesday: An Overflowing Cornucopia of CVEs Cyber Risks · Nov 10, 2026