CRITICAL🚩 CISA KEV⚡ EXPLOIT🇵🇱 Wersja polska

CVE-2011-2462

CVSS 9.8v3.1pub. 2011-12-07upd. 2026-04-21

Unspecified vulnerability in the U3D component in Adobe Reader and Acrobat 10.1.1 and earlier on Windows and Mac OS X, and Adobe Reader 9.x through 9.4.6 on UNIX, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via unknown vectors, as exploited in the wild in December 2011.

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Adobe Acrobat
APP
Adobe
≤ 10.1.1
Adobe Acrobat Reader
APP
Adobe
≤ 10.1.19.0 – 9.4.6
Apple Mac Os X
OS
Apple
wszystkie wersje
Microsoft Windows
OS
Microsoft
wszystkie wersje
Opengroup Unix
OS
Opengroup
wszystkie wersje

CISA KEV — detailsi

Vendori: Adobe ↗
Producti: Reader and Acrobat
Added to KEVi: June 8, 2022
Remediation deadline (US Federal)i: June 22, 2022(overdue)

🔧Advisory Adobe↗🇺🇸CISA KEV (original)↗

Required action (CISA)i

Apply updates per vendor instructions.

CISA descriptioni

The Universal 3D (U3D) component in Adobe Reader and Acrobat contains a memory corruption vulnerability which could allow remote attackers to execute code or cause denial-of-service (DoS).

🔴