CVE-2011-2462VulnerabilityPublished 06/08/2022Updated 10/24/2026
CVE-2011-2462: Adobe Reader and Acrobat Universal 3D Memory Corruption Vulnerability
Affects Adobe Reader and AcrobatSource CISA KEV
Severity
HighNo CVSS score published yet
- Exploitation
Actively exploited – in CISA KEV since 06/08/2022
- KEV deadline
- 06/22/2022
- EPSS
- 88.9% chance of exploitation in 30 days – higher than 99% of CVEs
What to do
CISA required action
Apply updates per vendor instructions.
Description
CVE-2011-2462 is a memory corruption vulnerability in the Universal 3D (U3D) component of Adobe Reader and Acrobat. This flaw could allow remote attackers to execute arbitrary code or cause a denial-of-service (DoS) condition. It has been exploited in the wild. No specific affected versions or patch information is provided in the available data.