Researcher Haifei Li discovered a zero-day vulnerability in Adobe Reader that appears to have been exploited via a malicious PDF document over an extended period. The vulnerability remains unpatched, and no detailed technical information or affected versions have been publicly disclosed. The exploit is currently not confirmed to be widely used in the wild beyond the initial report.

The impact involves potential compromise of systems running vulnerable versions of Adobe Reader through malicious PDF files. Since the vulnerability is unpatched and actively exploited, affected users may face risks such as unauthorized code execution or system compromise. However, the extent of exploitation and impact remains unclear due to limited information.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should exercise caution when opening PDF files from untrusted sources and consider using alternative PDF viewers or sandboxing techniques to mitigate risk.