Lucene search

K
cvelistAdobeCVELIST:CVE-2024-20731
HistoryFeb 15, 2024 - 12:18 p.m.

CVE-2024-20731 TALOS-2023-1901 - Adobe Acrobat Reader FileAttachment PDAnnot destroy use-after-free vulnerability

2024-02-1512:18:43
CWE-416
adobe
raw.githubusercontent.com
2
adobe
acrobat reader
vulnerability
fileattachment
pdannot
use-after-free
exploitation
user interaction
malicious file

7.1 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

37.7%

Acrobat Reader versions 20.005.30539, 23.008.20470 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

7.1 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

37.7%