Adobe Reader, Acrobat Update Nixes Zero Day
Summary: Adobe released updates for its PDF Reader and Acrobat on Mac, Windows and Linux to fix two critical flaws, including a Flash component flaw that attackers had been exploiting through poisoned PDFs reported as early as April 17. The patch also addresses a CoolType library bug credited to Poland's CERT, which Adobe said it had no reports of being exploited in the wild, while Reader X for Windows was deferred to the June 14, 2011 quarterly update because Protected Mode blocks the exploit.
Why it matters: Attackers were already mailing poisoned PDFs exploiting the Flash flaw before the fix shipped, and Windows users of Reader X had to wait until June 14, 2011 for their update - a window in which the only thing standing between them and the exploit was Protected Mode.
Read the original at Krebs on Security ↗
- Topics
- Zero-Days & Exploits
- Related
- New Sign Drop Exploit Can Abuse Windows Defender to Bypass Security Protections Cyber Risks · Nov 13, 2026New Sign Drop Zero-Day Exploit Turns Windows CLFS Security Feature Into SYSTEM Access Cyber Risks · Nov 12, 2026November Patch Tuesday: An Overflowing Cornucopia of CVEs Cyber Risks · Nov 10, 2026