CVE-2023-26405 ZDI-CAN-20712: Object Prototype pollution which leads to API Restrictions Bypass

🗓️ 12 Apr 2023 00:00:00Reported by adobeType

Adobe Acrobat Reader versions 23.001.20093 and 20.005.30441 are affected by an Improper Input Validation vulnerability, leading to Object Prototype pollution and API Restrictions Bypas

Reporter	Title	Published	Views	Family All 26
Tenable Nessus	Adobe Acrobat < 20.005.30467 / 23.001.20143 Multiple Vulnerabilities (APSB23-24)	11 Apr 202300:00	–	nessus
Tenable Nessus	Adobe Reader < 20.005.30467 / 23.001.20143 Multiple Vulnerabilities (APSB23-24)	11 Apr 202300:00	–	nessus
Tenable Nessus	Adobe Acrobat < 20.005.30467 / 23.001.20143 Multiple Vulnerabilities (APSB23-24) (macOS)	11 Apr 202300:00	–	nessus
Tenable Nessus	Adobe Reader < 20.005.30467 / 23.001.20143 Multiple Vulnerabilities (APSB23-24) (macOS)	11 Apr 202300:00	–	nessus
BDU FSTEC	The vulnerability of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat, and Adobe Acrobat Reader lies in insufficient validation of input data, allowing attackers to execute arbitrary code.	25 Apr 202300:00	–	bdu_fstec
Circl	CVE-2023-26405	13 Apr 202300:24	–	circl
CNNVD	Adobe Acrobat Reader 输入验证错误漏洞	12 Apr 202300:00	–	cnnvd
CNVD	Adobe Acrobat Reader Input Validation Error Vulnerability (CNVD-2023-55030)	16 Apr 202300:00	–	cnvd
CVE	CVE-2023-26405	12 Apr 202300:00	–	cve
EUVD	EUVD-2023-30225	3 Oct 202520:07	–	euvd

[
  {
    "vendor": "Adobe",
    "product": "Acrobat Reader",
    "versions": [
      {
        "version": "unspecified",
        "lessThanOrEqual": "23.001.20093",
        "status": "affected",
        "versionType": "custom"
      },
      {
        "version": "unspecified",
        "lessThanOrEqual": "20.005.30441",
        "status": "affected",
        "versionType": "custom"
      },
      {
        "version": "unspecified",
        "lessThanOrEqual": "None",
        "status": "affected",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
helpx	www.helpx.adobe.com/security/products/acrobat/apsb23-24.html

12 Apr 2023 00:00Current

7.9High risk

Vulners AI Score7.9

CVSS 3.17.8

EPSS0.04305

CWE-20