CVE-2023-26405

CVE-2023-26405 concerns Adobe Acrobat Reader (versions 23.001.20093 and earlier; 20.005.30441 and earlier). The issue is an improper input validation vulnerability in Acrobat Reader that can lead to arbitrary code execution in the context of the current user. Exploitation requires user interactio...

CVE-2023-26407

CVE-2023-26407 affects Adobe Acrobat Reader versions 23.001.20093 and earlier, and 20.005.30441 and earlier, with an Improper Input Validation vulnerability that could lead to arbitrary code execution in the context of the current user. Exploitation requires user interaction to open a malicious f...

Adobe Acrobat Reader 数字错误漏洞

Adobe Acrobat Reader is a PDF viewer from the American company Audobee Adobe. The software is used to print, sign and annotate PDF. Adobe Acrobat Reader has a numeric error vulnerability that can be exploited by an attacker to execute arbitrary code in the context of the current user...

CVE-2023-26396

CVE-2023-26396 affects Adobe Acrobat Reader Desktop (versions 23.001.20093 and earlier; 20.005.30441 and earlier). The issue is a Creation of Temporary File in Directory with Incorrect Permissions that could enable privilege escalation within the current user context. Exploitation requires user i...

Adobe Acrobat Reader 资源管理错误漏洞

Adobe Acrobat Reader is a PDF viewer from the American company Audobee Adobe. The software is used to print, sign and annotate PDF. Adobe Acrobat Reader suffers from a resource management error vulnerability that stems from the presence of a post-release reuse issue, which can be exploited by an...

CVE-2023-26417 ZDI-CAN-20583: Adobe Acrobat Reader DC Popup Use-After-Free Remote Code Execution Vulnerability

Adobe Acrobat Reader versions 23.001.20093 and earlier and 20.005.30441 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a...

CVE-2023-26406

CVE-2023-26406 affects Adobe Acrobat Reader (versions 23.001.20093 and earlier; 20.005.30441 and earlier). The issue is an improper access control that could allow arbitrary code execution in the context of the current user. Exploitation requires user interaction: a victim must open a malicious f...

Adobe Acrobat Reader 输入验证错误漏洞

Adobe Acrobat Reader is a PDF viewer from the American company Audobee Adobe. The software is used to print, sign and annotate PDF. Adobe Acrobat Reader suffers from an input validation error vulnerability that can be exploited by an attacker to execute arbitrary code in the context of the curren...

CVE-2023-26425

Technical details for CVE-2023-26425 are not publicly available in the provided documents. The connected sources reference the vulnerability broadly but do not specify affected product versions, root cause, impact, or remediation. Monitor for updates.

CVE-2023-26406 ZDI-CAN-20712: Net.HTTP.request URL restriction bypass

Adobe Acrobat Reader versions 23.001.20093 and earlier and 20.005.30441 and earlier are affected by an Improper Access Control vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must...

Adobe Acrobat Reader 资源管理错误漏洞

Adobe Acrobat Reader is a PDF viewer from the American company Audobee Adobe. The software is used to print, sign and annotate PDF. Adobe Acrobat Reader suffers from a resource management error vulnerability that stems from the presence of a post-release reuse issue, which can be exploited by an...

Adobe Acrobat Reader DC AcroForm addField Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Acrobat Reader DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handli...

Adobe Acrobat Reader DC AcroForm insertItemAt Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Acrobat Reader DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handli...

Adobe Acrobat Reader 资源管理错误漏洞

Adobe Acrobat Reader is a PDF viewer from the American company Audobee Adobe. The software is used to print, sign and annotate PDF. Adobe Acrobat Reader suffers from a resource management error vulnerability that stems from the presence of a post-release reuse issue, which can be exploited by an...

CVE-2023-26421 ZDI-CAN-19832: Adobe Acrobat Reader DC Doc Object Integer Underflow Remote Code Execution Vulnerability

Adobe Acrobat Reader versions 23.001.20093 and earlier and 20.005.30441 and earlier are affected by an Integer Underflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a...

CVE-2023-26419 ZDI-CAN-20274: Adobe Acrobat Reader DC AcroForm removeField Use-After-Free Remote Code Execution Vulnerability

Adobe Acrobat Reader versions 23.001.20093 and earlier and 20.005.30441 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a...

Adobe Acrobat Reader 缓冲区错误漏洞

Adobe Acrobat Reader is a PDF viewer from the American company Audobee Adobe. The software is used to print, sign and annotate PDF. Adobe Acrobat Reader has an out-of-bounds read vulnerability that can be exploited by an attacker to cause a sensitive memory leak...

CVE-2023-26420

CVE-2023-26420 affects Adobe Acrobat Reader versions 23.001.20093 and earlier, and 20.005.30441 and earlier. The vulnerability is a Use After Free that can lead to arbitrary code execution in the context of the current user. Exploitation requires user interaction: a victim must open a malicious f...

Vulnerabilities fixed in Adobe Acrobat and Acrobat Reader

Adobe has fixed vulnerabilities in Acrobat and Acrobat Reader. A malicious party can exploit the vulnerabilities for attacks that can lead to the following categories of damage: Circumvention of security measure. Remote code execution User rights Access to sensitive data Increased user privileges...

Adobe Acrobat Reader 访问控制错误漏洞

Adobe Acrobat Reader is a PDF viewer from the American company Audobee Adobe. The software is used to print, sign and annotate PDF. Adobe Acrobat Reader suffers from an Access Control Error vulnerability that can be exploited by an attacker to execute arbitrary code in the context of the current...