Vulnerability Spotlight: Multiple Adobe Acrobat Reader DC Vulnerabilities
Summary: Cisco Talos reported that a JavaScript script embedded in a PDF can drive the document ID field into an unbounded copy operation, producing a stack-based buffer overflow in Adobe Acrobat Reader DC 2018.009.20044. The overflow can overwrite the return address and lead to arbitrary code execution when a victim opens the malicious file or visits a malicious web page.
Bottom line: Exploitation requires only that a user open a crafted PDF or reach a malicious page in Acrobat Reader DC 2018.009.20044, so the exposure sits with every recipient of the file rather than with any server you control.
Read the original at Cisco Talos ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026