CVE-2026-34621

CVE-2026-34621 : Adobe Acrobat 2026 프로토타입 오염 및 JS 인젝션 체인 — 연구 PoC 개요 이 레포지토리는 2026년 Adobe Acrobat Reader의 실제 익스플로잇 체인 분석 중 개발된 연구 자료와 개념 증명 코드를 포함합니다. 해당 체인은 다음을 포함합니다: 프로토타입 오염 내부 JavaScript 인젝션 신뢰된 워크플로우 악용 패치 차이 분석 권한 있는 JavaScript 실행 이 연구는 악성 PDF 문서에 사용된 취약점 체인을 이해하고 Adobe가 여러 패치를 통해 도입한 수정 사...

CVE-2021-39863

CVE-2021-39863 Adobe Acrobat Reader DC 21.005.20048.43252 32비트 이 버전 다운로드: https://ardownload2.adobe.com/pub/adobe/reader/win/AcrobatDC/2100520048/AcroRdrDC2100520048enUS.exe ASLR, DEP 우회 CFG 우회 불가 분석 팀 블로그 팀원 블로그 - mntly Adobe root cause.pdf : CVE-2021-39863의 근본 원인 설명 ExploitPoint.c : 취약 함수 리버싱...

DocViewerExploitApp

DocViewerExploit 앱 - CVE-2021-40724 이는 MobileHackingLab의 Document Viewer를 악용하기 위한 소스 코드입니다. 취약한 앱 정보 이는 MobileHackingLab DocumentViewer Abdroid App Dynamic Code Loading RCE challenge를 위한 익스플로잇 앱입니다. 이 챌린지는 Adobe Acrobat Reader Android 앱에서 발견된 CVE-2021-40724 취약점을 에뮬레이트합니다. 앱은 라이브러리 파일에서 코드를 동적으로...

Exploit-CVE-2021-21086

Эксплойт CVE-2021-21086 Этот эксплойт позволяет выполнить шелл-код в контексте процесса рендеринга Adobe Acrobat Reader DC версий 2020.013.20074 и более ранних на Windows 10. Примечание: используемый в этом примере шелл-код открывает калькулятор. Для его работы необходимо отключить песочницу Adob...

CVE-2023-21608

CVE-2023-21608 Discord 服务器 此漏洞为 Use after Free，由 resetForm 操作在处理对象内存引用时引发。 博客 Adobe Acrobat Reader - resetForm - CAgg UaF - RCE 漏洞利用 - CVE-2023-21608 安全公告 CVE-2023-21608 演示...

PoC-CVE-2020-9715

CVE-2020-9715 EDR 검증 PoC Adobe Acrobat Reader DC의 EScript.api ESObject 캐시에서 발생하는 Use-after-free 취약점입니다. 공인된 레드팀 EDR 테스트 전용입니다. 취약점 Adobe Acrobat Reader DC = 2020.009.20063. EScript 엔진은 데이터 ESObject를 원래 인코딩ANSI 또는 유니코드을 유지하는 키로 캐시합니다. 삭제 시 항상 유니코드 키가 생성되므로 ANSI 이름의 항목은 캐시에서 제거되지 않습니다. GC가 기본 객체를 해...

CVE-2026-3462

CVE-2026-3462 Acrobat Reader | 객체 프로토타입 속성의 부적절한 제어 '프로토타입 오염' CWE-1321 CVE-2026-34621 - 고급 크로스 플랫폼 익스플로잇 생성기 =========================================================== Adobe Acrobat/Reader의 프로토타입 오염 및 샌드박스 탈출 취약점을 악용하는 악성 PDF를 생성합니다. 기능: OS 자동 감지 Windows, macOS, 모바일 폴백 다양한 회피 기법 난독화, 키잉, 지연 스테이...

CVE-2023-21608

CVE-2023-21608 Adobe Acrobat Reader - CVE-2023-21608 - Эксплойт удаленного выполнения кода Блог https://medium.com/@Kushagra007/adobe-acrobat-reader-resetform-cagg-uaf-rce-exploit-cve-2023-21608-652624346c8f ДЕМО...

CVE-2026-81997

Acrobat Reader is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploitation of this issue requires user interaction in that a victi...

CVE-2026-81996

Acrobat Reader is affected by an Incorrect Authorization vulnerability that could result in privilege escalation. A low-privileged attacker could exploit this vulnerability to gain elevated access. Exploitation of this issue does not require user interaction. Scope is changed...

CVE-2026-81993

Acrobat Reader is affected by a Heap-based Buffer Overflow vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue requires user interaction in that a victim must open a malicious...

CVE-2026-82001

Acrobat Reader is affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability to exhaust system resources, resulting in an application denial-of-service condition. Exploitation of this issue requires...

CVE-2026-81994

Acrobat Reader is affected by an Improperly Controlled Modification of Object Prototype Attributes 'Prototype Pollution' vulnerability that could lead to arbitrary file system read. An attacker could exploit this vulnerability to access sensitive files and directories outside the intended access...

CVE-2026-81985

Acrobat Reader is affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2026-81988

Acrobat Reader is affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2026-81987

Acrobat Reader is affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2026-81991

Acrobat Reader is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2026-81990

Acrobat Reader is affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2026-81989

Acrobat Reader is affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2026-81992

Acrobat Reader is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...