CVE-2017-11210

CVE-2017-11210 is a memory corruption vulnerability in Adobe Acrobat Reader, affecting versions 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier. The flaw resides in the font parsing component when processing fonts embedded in XML Paper Specification (XPS) files. Successful exploitation could lead to arbitrary code execution on affected systems, including those running on Apple and Microsoft platforms. The vulnerability carries a CVSS v3 score of 6.5 (Medium), indicating a network-based attack with low attack complexity requiring user interaction. While the potential impact includes high confidentiality impact, there is no integrity or availability impact. The EPSS score of 0.11531 suggests a relatively low likelihood of exploitation compared to other CVEs. Currently, there is no evidence of active exploitation (KEV list) or publicly available exploit code in Metasploit, Nuclei, or ExploitDB. Community discussion and media coverage are minimal, with only one mention and one article identified, indicating limited public attention to this specific vulnerability.