CVE-2010-0188

A critical Adobe Reader/Acrobat vulnerability (CVE-2010-0188) allowed arbitrary code execution and is actively exploited, often linked to ransomware attacks.

This vulnerability in Adobe Reader/Acrobat enabled attackers to execute arbitrary code, potentially leading to system compromise and data exfiltration. DIB organizations using these products must ensure patching and consider compensating controls due to Adobe's history of similar vulnerabilities. Failure to address this could result in non-compliance with CMMC and NIST 800-171.

Shame score — Adobe's repeated history of critical RCE vulnerabilities in widely-used products demonstrates a pattern of negligence and insufficient security practices.