CVE-2017-11235: Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, an...

Security readout for executives and security teams

This is a code execution flaw in Adobe Acrobat Reader. A vulnerable Reader version can mishandle JPEG decompression in its image conversion engine, creating a use-after-free condition. If exploited successfully, an attacker could run arbitrary code in the context of the affected user. Exposure is limited to systems running the listed Adobe Acrobat Reader versions. The provided sources identify the vulnerable product and versions, but do not provide asset prevalence, platform details, or confirmed affected configurations beyond those Reader release lines. Treat this as a high-priority endpoint patching issue, especially where users open external documents. There is no active exploitation evidence in the provided sources, but arbitrary code execution in a common document reader creates meaningful user-workstation risk. Mitigation focus: Inventory Adobe Acrobat Reader versions across managed endpoints.; Prioritize upgrades for versions listed as affected in the CVE record.; Follow Adobe APSB17-24 for vendor update guidance..

Prepared

Jun 12, 2026, 21:41 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.