CVE-2024-20734 ZDI-CAN-22516: Adobe Acrobat Pro DC AcroForm Use-After-Free Information Disclosure Vulnerability

🗓️ 15 Feb 2024 12:18:39Reported by adobeType

Adobe Acrobat Pro DC AcroForm Use-After-Free Vulnerabilit

Reporter	Title	Published	Views	Family All 26
Tenable Nessus	Adobe Acrobat < 20.005.30574 / 23.008.20533 Multiple Vulnerabilities (APSB24-07)	13 Feb 202400:00	–	nessus
Tenable Nessus	Adobe Reader < 20.005.30574 / 23.008.20533 Multiple Vulnerabilities (APSB24-07)	13 Feb 202400:00	–	nessus
Tenable Nessus	Adobe Acrobat < 20.005.30574 / 23.008.20533 Multiple Vulnerabilities (APSB24-07) (macOS)	13 Feb 202400:00	–	nessus
Tenable Nessus	Adobe Reader < 20.005.30574 / 23.008.20533 Multiple Vulnerabilities (APSB24-07) (macOS)	13 Feb 202400:00	–	nessus
BDU FSTEC	The vulnerabilities of PDF viewing and editing programs like Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, and Adobe Acrobat 2020/Adobe Acrobat Reader 2020 involve memory management issues after the memory is freed, allowing attackers to disclose protected information.	15 Mar 202400:00	–	bdu_fstec
Circl	CVE-2024-20734	15 Feb 202414:32	–	circl
CNNVD	Adobe Acrobat Reader 资源管理错误漏洞	15 Feb 202400:00	–	cnnvd
CNVD	Adobe Acrobat and Reader Post-Release Usage Vulnerability (CNVD-2024-11669)	29 Feb 202400:00	–	cnvd
CVE	CVE-2024-20734	15 Feb 202412:18	–	cve
EUVD	EUVD-2024-18449	3 Oct 202520:07	–	euvd

[
  {
    "defaultStatus": "affected",
    "product": "Acrobat Reader",
    "vendor": "Adobe",
    "versions": [
      {
        "lessThanOrEqual": "23.008.20470",
        "status": "affected",
        "version": "0",
        "versionType": "semver"
      }
    ]
  }
]

Source	Link
helpx	www.helpx.adobe.com/security/products/acrobat/apsb24-07.html

15 Feb 2024 12:18Current

6.2Medium risk

Vulners AI Score6.2

CVSS 3.15.5

EPSS0.0009

CWE-416