CVE-2010-0188
HIGHCVSS 7.8/10Actively ExploitedEPSS 88.25%
Last modified
CVE-2010-0188 is a high-severity vulnerability rated 7.8/10 on the CVSS scale. Unspecified vulnerability in Adobe Reader and Acrobat 8.x before 8.2.1 and 9.x before 9.3.1 allows attackers to cause a denial of service (application crash) or possibly execute arbitrary code via unknown vectors.. CISA has confirmed active exploitation in the wild. EPSS estimates a 88.25% chance of exploitation in the next 30 days.
Description
Unspecified vulnerability in Adobe Reader and Acrobat 8.x before 8.2.1 and 9.x before 9.3.1 allows attackers to cause a denial of service (application crash) or possibly execute arbitrary code via unknown vectors.
Metrics
Exploitation Status
This vulnerability is listed in CISA’s Known Exploited Vulnerabilities catalog, confirming active exploitation in the wild. Federal agencies must remediate by .
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Adobe | Acrobat | >= 8.0, < 8.2.1 |
| Adobe | Acrobat | >= 9.0, < 9.3.1 |
| Adobe | Acrobat Reader | >= 8.0, < 8.2.1 |
| Adobe | Acrobat Reader | >= 9.0, < 9.3.1 |
References
- https://lists.opensuse.org/opensuse-security-announce/2010-03/msg00004.htmlMailing List, Third Party Advisory
- https://secunia.com/advisories/38639Broken Link, Vendor Advisory
- https://secunia.com/advisories/38915Broken Link
- https://securitytracker.com/id?1023601Broken Link, Third Party Advisory, VDB Entry
- https://www.adobe.com/support/security/bulletins/apsb10-07.htmlBroken Link, Vendor Advisory
- https://www.redhat.com/support/errata/RHSA-2010-0114.htmlBroken Link, Vendor Advisory
- https://www.securityfocus.com/bid/38195Broken Link, Third Party Advisory, VDB Entry
- https://www.vupen.com/english/advisories/2010/0399Broken Link, Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/56297Third Party Advisory, VDB Entry
- https://lists.opensuse.org/opensuse-security-announce/2010-03/msg00004.htmlMailing List, Third Party Advisory
- https://secunia.com/advisories/38639Broken Link, Vendor Advisory
- https://secunia.com/advisories/38915Broken Link
- https://securitytracker.com/id?1023601Broken Link, Third Party Advisory, VDB Entry
- https://www.adobe.com/support/security/bulletins/apsb10-07.htmlBroken Link, Vendor Advisory
- https://www.redhat.com/support/errata/RHSA-2010-0114.htmlBroken Link, Vendor Advisory
- https://www.securityfocus.com/bid/38195Broken Link, Third Party Advisory, VDB Entry
- https://www.vupen.com/english/advisories/2010/0399Broken Link, Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/56297Third Party Advisory, VDB Entry
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2010-0188US Government Resource
Timeline
- Published
- Last Modified
- Status
- Analyzed
Frequently Asked Questions
What is CVE-2010-0188?
Unspecified vulnerability in Adobe Reader and Acrobat 8.x before 8.2.1 and 9.x before 9.3.1 allows attackers to cause a denial of service (application crash) or possibly execute arbitrary code via unknown vectors.
How severe is CVE-2010-0188?
CVE-2010-0188 has a CVSS score of 7.8/10 (HIGH severity). The EPSS model estimates a 88.25% probability of exploitation in the next 30 days. This vulnerability is listed in CISA's Known Exploited Vulnerabilities catalog.
How do I fix CVE-2010-0188?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2010
- CVE-2010-0182The XMLDocument::load function in Mozilla Firefox before 3.5…
- CVE-2010-0183Use-after-free vulnerability in the nsCycleCollector::MarkRo…
- CVE-2010-0184The (1) domainutility and (2) domainutilitycmd components in…
- CVE-2010-0185The default configuration of Adobe ColdFusion 9.0 does not r…
- CVE-2010-0186Cross-domain vulnerability in Adobe Flash Player before 10.0…
- CVE-2010-0187Adobe Flash Player before 10.0.45.2 and Adobe AIR before 1.5…
- CVE-2010-0189A certain ActiveX control in NOS Microsystems getPlus Downlo…
- CVE-2010-0190Cross-site scripting (XSS) vulnerability in Adobe Reader and…
- CVE-2010-0191Adobe Reader and Acrobat 9.x before 9.3.2, and 8.x before 8.…
- CVE-2010-0192Unspecified vulnerability in Adobe Reader and Acrobat 9.x be…
- CVE-2010-0193Unspecified vulnerability in Adobe Reader and Acrobat 9.x be…
- CVE-2010-0194Adobe Reader and Acrobat 9.x before 9.3.2, and 8.x before 8.…
Are you affected by CVE-2010-0188?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST