A zero-day vulnerability in Adobe Reader is under active exploitation, though the article does not specify the exact attack vector or CVSS score. The advisory does not provide the specific affected version ranges or a fixed version number for remediation. Organizations should consult Adobe's official security bulletin for patching guidance and consider applying workarounds, such as disabling JavaScript in Adobe Reader, until a patch is available.