CVE-2010-0190: adobe acrobat
Vulnerability summary
CVE-2010-0190 is a medium (CVSS 4.3) vulnerability in adobe acrobat. EPSS estimates a 2.70% chance of exploitation in the next 30 days, higher than 85.9% of scored vulnerabilities.
Not severe (CVSS 4.3, network access); no exploitation reported by the 5 checked sources
Source freshness unavailable
How is this decided?Advisory lineage
Upstream 0 · Downstream 1Timeline
- 14-04-2010PublishedVulnerability first disclosed.
- 07-08-2024Last modifiedVulnerability information updated.
Description
Cross-site scripting (XSS) vulnerability in Adobe Reader and Acrobat 9.x before 9.3.2, and 8.x before 8.2.2 on Windows and Mac OS X, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVSS metrics
1 score · 1 source · 1 versionEPSS trend
Probability
2.70%
Chance of exploitation in the next 30 days
Percentile
86%
Versus all other CVEs
30-day change
No change 0.00 pp
From 2.70% on 04-10-2026
Known exploited
Compare KEV catalogsNot in the CISA KEV catalog.
Not in the ENISA CNW catalog.
Not in the CIRCL catalog.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Known conditions: network-reachable, no authentication (CVSS vector). Other conditions: not stated in public data.
Adobe2 products
- acrobat9.0 | 9.1 | 9.1.1 | 9.1.2 | 9.1.3 | 9.2 | 9.3 | 9.3.1 | 8.0 | 8.1 | 8.1.1 | 8.1.2 | 8.1.3 | 8.1.4 | 8.1.5 | 8.1.6 | 8.1.7 | 8.2 | 8.2.1
- acrobat_reader9.0 | 9.1 | 9.1.1 | 9.1.2 | 9.1.3 | 9.2 | 9.3 | 9.3.1 | 8.0 | 8.1 | 8.1.1 | 8.1.2 | 8.1.4 | 8.1.5 | 8.1.6 | 8.1.7 | 8.2.1
1 vendor · 2 products
References
5 links- www.us-cert.gov/cas/techalerts/TA10-103C.htmlThird Party AdvisoryX Refsource CERTUS Government Resource
- oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6986VDB EntrySignatureX Refsource OVAL