Adobe patches a critical PDF flaw exploited for months, allowing attackers to bypass sandbox protections and deliver malware.