In 2023, a zero-day exploit was discovered in legacy Adobe Reader engines (including Acrobat 9). Malicious PDFs can: