Adobe Reader and Acrobat 10.x before 10.1.11 and 11.x before 11.0.08 on Windows allow attackers to bypass a sandbox protection mechanism, and consequently execute native code in a privileged context, via unspecified vectors.
Evidence confidence: Exploitation recorded
● Hype ● Reality
Earlier evidence-support scores are retained in history; this chart shows only the current priority definition.
First record: hype 0.0 · reality 8.4 (2026-11-02 15:12). The curve appears once the score changes.
Public exploit entries / repo candidates
Reality is general threat/review priority, combining observed exploitation, CVSS severity and fresh EPSS. Evidence confidence is separate. This is not calibrated risk, a victim count or an asset-specific assessment. A range reflects missing numeric inputs.
Score evaluated: 2026-11-11 19:06:09.390035+00:00 · EPSS snapshot: 2026-11-11T12:00:22Z