CVE-2024-49535

🗓️ 10 Dec 2024 19:54:08Reported by adobeType

cve🔗 web.nvd.nist.gov📰️ 1 Media mentions👁 171 Views

Acrobat Reader has a vulnerability allowing XML External Entity Reference exploitation for code execution.

Reporter	Title	Published	Views	Family All 19
Tenable Nessus	Adobe Acrobat < 20.005.30748 / 24.001.30225 / 24.005.20320 Multiple Vulnerabilities (APSB24-92)	10 Dec 202400:00	–	nessus
Tenable Nessus	Adobe Reader < 20.005.30748 / 24.005.20320 Multiple Vulnerabilities (APSB24-92)	10 Dec 202400:00	–	nessus
Tenable Nessus	Adobe Acrobat < 20.005.30748 / 24.001.30225 / 24.005.20320 Multiple Vulnerabilities (APSB24-92) (macOS)	10 Dec 202400:00	–	nessus
Tenable Nessus	Adobe Reader < 20.005.30748 / 24.005.20320 Multiple Vulnerabilities (APSB24-92) (macOS)	10 Dec 202400:00	–	nessus
Circl	CVE-2024-49535	10 Dec 202421:40	–	circl
CNNVD	Adobe Acrobat Reader 代码问题漏洞	10 Dec 202400:00	–	cnnvd
CNVD	Adobe Acrobat Reader XML External Entity Injection Vulnerability	13 Dec 202400:00	–	cnvd
Cvelist	CVE-2024-49535 Acrobat Reader \| Improper Restriction of XML External Entity Reference ('XXE') (CWE-611)	10 Dec 202419:54	–	cvelist
EUVD	EUVD-2024-43811	3 Oct 202520:07	–	euvd
Kaspersky	KLA78032 Multiple vulnerabilities in Adobe Acrobat Reader	10 Dec 202400:00	–	kaspersky

NVD

Vulners

Node

adobe acrobatRange20.001.30002–20.005.30748classic

adobe acrobatRange24.0.0–24.001.30225classic

adobe acrobat_dcRange<24.005.20320continuous

adobe acrobat_readerRange20.001.30002–20.005.30748classic

adobe acrobat_reader_dcRange<24.005.20320continuous

AND

apple macosMatch-

microsoft windowsMatch-

[
  {
    "defaultStatus": "affected",
    "product": "Acrobat Reader",
    "vendor": "Adobe",
    "versions": [
      {
        "lessThanOrEqual": "20.005.30710",
        "status": "affected",
        "version": "0",
        "versionType": "semver"
      }
    ]
  }
]

Source	Link
helpx	www.helpx.adobe.com/security/products/acrobat/apsb24-92.html

17 Jun 2026 07:59Current

5.9Medium risk

Vulners AI Score5.9

CVSS 3.16.3

EPSS0.00395

SSVC

CWE-611