Skip to main content

Actively exploited

Listed in CISA’s Known Exploited Vulnerabilities catalog since March 3, 2022.

Known ransomware use

CVE-2010-0188

Adobe Reader and Acrobat Arbitrary Code Execution Vulnerability

Adobe · Reader and Acrobat

Added to KEV March 3, 2022

Alert details

Source feed
CISA KEV
CVE ID
CVE-2010-0188
CWE
CWE-94
Affected products
Reader and Acrobat · Adobe Reader and Acrobat · Adobe

What happened

Unspecified vulnerability in Adobe Reader and Acrobat allows attackers to cause a denial of service or possibly execute arbitrary code.

What it means for your business

Adobe Reader and Acrobat is listed in CISA's Known Exploited Vulnerabilities catalog (CVE-2010-0188). Unspecified vulnerability in Adobe Reader and Acrobat allows attackers to cause a denial of service or possibly execute arbitrary code. CISA remediation due date: 2022-03-24. If you need help checking exposure, call (864) 335-9223.

Required action

Apply updates per vendor instructions.

CISA due date: March 24, 2022

Sources

Related briefs

Actively exploited (KEV)

CVE-2026-71362

Adobe Commerce and Magento Incorrect Authorization Vulnerability

Adobe Commerce and Magento is listed in CISA's Known Exploited Vulnerabilities catalog (CVE-2026-71362). Adobe Commerce and Magento contains an incorrect authorization vulnerability that could allow an attacker to leverage this vulnerability to gain elevated access to sensitive resources without any user interaction. CISA remediation due date: 2026-09-27. If you need help checking exposure, call (864) 335-9223.

Actively exploited (KEV)

CVE-2026-88779

Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability

Citrix NetScaler is listed in CISA's Known Exploited Vulnerabilities catalog (CVE-2026-88779). Citrix NetScaler ADC (formerly Citrix ADC) and Citrix NetScaler Gateway (formerly Citrix Gateway) contain an improper restriction of operations within the bounds of a memory buffer vulnerability that could allow for a denial of service. CISA remediation due date: 2026-10-07. If you need help checking exposure, call (864) 335-9223.

HighMicrosoft MSRC

CVE-2025-10502

Heap buffer overflow in ANGLE in Microsoft Edge vulnerability

Heap buffer overflow in ANGLE in Microsoft Edge vulnerability (CVE-2025-10502) was added to Microsoft’s security update guidance. Information published. If you need help checking exposure, call (864) 335-9223.

HighMicrosoft MSRC

CVE-2026-96940

Microsoft Exchange Server Elevation of Privilege vulnerability

Microsoft Exchange Server Elevation of Privilege vulnerability (CVE-2026-96940) was added to Microsoft’s security update guidance. Weak authorization in Microsoft Exchange Server allows an authenticated attacker to elevate privileges over a network. If you need help checking exposure, call (864) 335-9223.

Need help patching?

PremierePC monitors KEV alerts for managed clients and helps teams prioritize remediation before attackers do.