KLA48835 Multiple vulnerabilities in Adobe Acrobat and Adobe Acrobat Reader

🗓️ 11 Apr 2023 00:00:00Reported by Kaspersky LabType

kaspersky🔗 threats.kaspersky.com👁 43 Views

Multiple vulnerabilities in Adobe Acrobat and Adobe Acrobat Reader. Malicious exploitation can lead to code execution, security restriction bypass, sensitive information theft, and privilege escalation. Update to the latest version is required

Reporter	Title	Published	Views	Family All 200
Tenable Nessus	Adobe Acrobat < 20.005.30467 / 23.001.20143 Multiple Vulnerabilities (APSB23-24)	11 Apr 202300:00	–	nessus
Tenable Nessus	Adobe Reader < 20.005.30467 / 23.001.20143 Multiple Vulnerabilities (APSB23-24)	11 Apr 202300:00	–	nessus
Tenable Nessus	Adobe Acrobat < 20.005.30467 / 23.001.20143 Multiple Vulnerabilities (APSB23-24) (macOS)	11 Apr 202300:00	–	nessus
Tenable Nessus	Adobe Reader < 20.005.30467 / 23.001.20143 Multiple Vulnerabilities (APSB23-24) (macOS)	11 Apr 202300:00	–	nessus
BDU FSTEC	The vulnerability of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat, and Adobe Acrobat Reader lies in insufficient validation of input data, allowing attackers to execute arbitrary code.	25 Apr 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerabilities of PDF viewing and editing programs like Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, and Adobe Acrobat 2020/Adobe Acrobat Reader 2020 involve creating temporary files with insecure permissions, allowing attackers to escalate their privileges.	25 Oct 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerabilities of PDF viewing and editing programs like Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, and Adobe Acrobat 2020/Adobe Acrobat Reader 2020 involve reading data beyond the buffer in memory, allowing attackers to disclose protected information.	25 Oct 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerabilities of PDF viewing and editing programs like Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, and Adobe Acrobat 2020/Adobe Acrobat Reader 2020 are related to insufficient validation of input data. This allows attackers to execute arbitrary code.	26 Oct 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerabilities of PDF viewing and editing programs like Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, and Adobe Acrobat 2020/Adobe Acrobat Reader 2020 are related to lack of access control mechanisms. This allows attackers to bypass security restrictions.	26 Oct 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerabilities of PDF viewing and editing programs like Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, and Adobe Acrobat 2020/Adobe Acrobat Reader 2020 are related to lack of access control mechanisms. This allows attackers to execute arbitrary code.	26 Oct 202300:00	–	bdu_fstec

Source	Link
helpx	www.helpx.adobe.com/security/products/acrobat/apsb23-24.html
threats	www.threats.kaspersky.com/en/product/Adobe-Acrobat-Reader-DC-Continuous/
threats	www.threats.kaspersky.com/en/product/Adobe-Acrobat-DC-Continuous/
threats	www.threats.kaspersky.com/en/product/Adobe-Acrobat-Reader-2020/
threats	www.threats.kaspersky.com/en/product/Adobe-Acrobat-2020/
statistics	www.statistics.securelist.com/

28 Mar 2025 00:00Current

8.8High risk

Vulners AI Score8.8

CVSS 3.17.8

EPSS0.04566

SSVC