Hackers Exploiting Acrobat Reader Zero-Day Flaw

Photo by protect.computer on protect.computer

Cybersecurity researchers have uncovered that hackers have been actively exploiting a zero-day vulnerability in Adobe Acrobat Reader since late last year. This critical flaw allows attackers to execute arbitrary code on a victim’s machine simply by having them open a specially crafted PDF document.

The vulnerability stems from improper memory handling within the software’s parsing engine. When triggered, it grants the attacker the same privileges as the user running the application, making it a severe threat for potential malware installation or data exfiltration.

How to check if you’re affected

If you use affected versions of Adobe Acrobat or Adobe Acrobat Reader on Windows or macOS, you might be at risk. To ensure you are protected:

1. Open Adobe Acrobat or Acrobat Reader.
2. Go to Help > Check for Updates in the top menu.
3. Follow the prompts to download and install the latest available version.
4. Verify your version is up to date (the patch was released in the latest update cycle).

Sources

• BleepingComputer: Hackers exploiting Acrobat Reader zero-day flaw since December