Adobe also embedded a JavaScript engine in Acrobat to support interactive PDF features like form validation and automation. Both Flash and JavaScript introduced significant security risks over the years.
While Flash is no longer supported, Acrobat Reader still includes JavaScript functionality, which remains a potential attack surface. In contrast, lightweight PDF readers such as Sumatra do not support JavaScript or Flash, offering a smaller and more secure footprint.