CVE-2023-38222 ZDI-CAN-21103: Adobe Acrobat Reader DC AcroForm spawnPageFromTemplate Use-After-Free Remote Code Execution Vulnerability

🗓️ 10 Aug 2023 13:40:17Reported by adobeType

Adobe Acrobat Reader Use-After-Free Remote Code Execution Vulnerabilit

Reporter	Title	Published	Views	Family All 19
Prion	Design/Logic Flaw	10 Aug 202314:15	–	prion
Zero Day Initiative	Adobe Acrobat Reader DC AcroForm spawnPageFromTemplate Use-After-Free Remote Code Execution Vulnerability	14 Aug 202300:00	–	zdi
CNVD	Adobe Acrobat Reader post-release reuse vulnerability (CNVD-2023-71759)	12 Aug 202300:00	–	cnvd
NVD	CVE-2023-38222	10 Aug 202314:15	–	nvd
CVE	CVE-2023-38222	10 Aug 202314:15	–	cve
Tenable Nessus	Adobe Reader < 20.005.30514.10514 / 23.003.20269 Multiple Vulnerabilities (APSB23-30)	8 Aug 202300:00	–	nessus
Tenable Nessus	Adobe Acrobat < 20.005.30514.10514 / 23.003.20269 Multiple Vulnerabilities (APSB23-30)	8 Aug 202300:00	–	nessus
Tenable Nessus	Adobe Acrobat < 20.005.30514.10514 / 23.003.20269 Multiple Vulnerabilities (APSB23-30) (macOS)	8 Aug 202300:00	–	nessus
Tenable Nessus	Adobe Reader < 20.005.30514.10514 / 23.003.20269 Multiple Vulnerabilities (APSB23-30) (macOS)	8 Aug 202300:00	–	nessus
Adobe	APSB23-30 : Security update available for Adobe Acrobat and Reader	8 Aug 202300:00	–	adobe

[
  {
    "defaultStatus": "affected",
    "product": "Acrobat Reader",
    "vendor": "Adobe",
    "versions": [
      {
        "lessThanOrEqual": "23.003.20244",
        "status": "affected",
        "version": "0",
        "versionType": "semver"
      }
    ]
  }
]

Source	Link
helpx	www.helpx.adobe.com/security/products/acrobat/apsb23-30.html

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

10 Aug 2023 13:17Current

7.9High risk

Vulners AI Score7.9

CVSS37.8

EPSS0.384

CWE-416