Is CVE-2011-2462 being actively exploited?

Yes. CVE-2011-2462 is listed in the CISA Known Exploited Vulnerabilities (KEV) catalog, added on June 8, 2022.

What is the CVSS score for CVE-2011-2462?

CVE-2011-2462 has a CVSS 3.1 base score of 9.8 (CRITICAL).

CVE-2011-2462

CRITICAL · CVSS 9.8CISA KEV: actively exploitedEPSS 88.6%EU EUVD: exploited

Unspecified vulnerability in the U3D component in Adobe Reader and Acrobat 10.1.1 and earlier on Windows and Mac OS X, and Adobe Reader 9.x through 9.4.6 on UNIX, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via unknown vectors, as exploited in the wild in December 2011.

Key facts

CVSS score: 9.8 (v3.1)
Severity: CRITICAL
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness (CWE): CWE-787
EPSS score: 88.6% (100th percentile)
In CISA KEV: Yes, added June 8, 2022
In EU EUVD: Yes (EUVD-2011-2451)
Published: December 7, 2011
NVD last modified: June 16, 2026
Status: Analyzed

CISA Known Exploited Vulnerability

Adobe Reader and Acrobat Universal 3D Memory Corruption Vulnerability

Added to the KEV catalog on June 8, 2022; federal remediation due June 22, 2022.

EU Vulnerability Database (EUVD)

This vulnerability is also tracked by ENISA as EUVD-2011-2451 in the EU Vulnerability Database. ENISA flags it as known exploited. Last updated in EUVD on November 21, 2025.

View on the EU Vulnerability Database

Affected products

adobe / acrobat
adobe / acrobat reader
apple / mac os x
microsoft / windows
opengroup / unix

References

http://lists.opensuse.org/opensuse-security-announce/2012-01/msg00019.html(Broken Link)
http://lists.opensuse.org/opensuse-security-announce/2012-01/msg00020.html(Broken Link)
http://www.adobe.com/support/security/advisories/apsa11-04.html(Vendor Advisory)
http://www.adobe.com/support/security/bulletins/apsb11-30.html(Not Applicable)
http://www.adobe.com/support/security/bulletins/apsb12-01.html(Not Applicable)
http://www.redhat.com/support/errata/RHSA-2012-0011.html(Broken Link)
http://www.us-cert.gov/cas/techalerts/TA11-350A.html(Third Party Advisory, US Government Resource)
https://github.com/cisagov/vulnrichment/issues/199(Issue Tracking)
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14562(Broken Link)
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2011-2462(US Government Resource)

Last updated September 17, 2026 · Source: NVD, CISA KEV, FIRST.org EPSS

Query CVEs from your AI assistant

The CVE/NVD Explorer brain answers CVE questions directly inside Claude, ChatGPT, or any MCP assistant — always up to date, no setup. Add it once and stop pasting advisories into chat.

Add the CVE brain