High (8.8) in adobe. EPSS 9.5% chance of exploitation in the next 30 days.
Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable use after free vulnerability in XFA event management. Successful exploitation could lead to arbitrary code execution.
Severity
CVSS 3.0
8.8 high
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS
9.5% chance of exploitation in the next 30 days; higher than 95% of CVEs (scores of 2026-10-31)