Adobe and Russian security company Group-IB have been unable to reproduce a zero-day sandbox-bypass exploit. Adobe has yet to receive proof of concept code for a sandbox bypass. The vulnerability was reported Nov. 7 by Russian security firm Group-ib. Adobe: “We don’t know whether we re still in the dark to a patch with either party s [Group-IB] or not to fix the bug”” The vulnerability is caused by some malformed data

Source: security