Security experts at Cisco Talos disclosed details of a remote code execution flaw that affects Adobe Acrobat Reader DC versions 2018.009.20050 and 2017.011.30070 and earlier. A remote attacker can exploit the vulnerability tricking the victim into opening a malicious file or visiting a specially crafted webpage. The flaw could be used by attackers to embed a malicious JavaScript code in a PDF file to use document ID to perform unauthorized operations. The vulnerability was disclosed on Dec. 7 and Adobe addressed it a few days ago, on February 13.”]
Source: https://securityaffairs.co/wordpress/69639/hacking/adobe-acrobat-reader-flaw.html