A remote code execution security flaw has been patched in one of the latest versions of Adobe Acrobat Reader DC. The vulnerability allows attackers to hide malicious JavaScript code in a PDF file. It can be triggered when a malicious file is opened or a victim accesses a rigged webpage. Adobe issued a patch on Feb. 13 to fix the bug, which affects versions 2018.009.20050 and 2017.011.30070. There are currently no known exploits in the wild, according to Talos Group.
Source: https://threatpost.com/remote-code-execution-bug-patched-in-adobe-acrobat-reader-dc/130109/