CVE-2011-2100: Untrusted search path vulnerability in Adobe Reader and Acrobat 8.x before 8.3, 9.x before 9.4.5, and 10.x...

Security readout for executives and security teams

This flaw affects old Windows installations of Adobe Reader and Acrobat. A local user could place a malicious DLL where the application is launched and potentially gain higher privileges. The issue is historical and not listed as CISA KEV, but any remaining vulnerable installations should be removed or updated. Exposure is most likely on legacy Windows endpoints or servers retaining Adobe Reader or Acrobat 8.x, 9.x, or early 10.x. Modern managed fleets are unlikely to be affected unless old software remains installed. Treat as a legacy hygiene issue with privilege-escalation impact. It is not a current KEV emergency from the provided evidence, but vulnerable Adobe installations are old enough to justify prompt retirement or upgrade. Mitigation focus: Upgrade Reader and Acrobat to fixed versions or later per Adobe guidance.; Remove unsupported legacy Adobe Reader or Acrobat installations from Windows hosts.; Prioritize systems where untrusted users can write files and launch Adobe applications..

Prepared

Jun 28, 2026, 00:52 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.