CVE-2023-26420 ZDI-CAN-20227: Adobe Acrobat Reader DC AcroForm addField Use-After-Free Remote Code Execution Vulnerability

Adobe Acrobat Reader versions 23.001.20093 and earlier and 20.005.30441 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a...

Adobe Acrobat Reader DC AcroForm addField Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Acrobat Reader DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handli...

CVE-2023-26396 Adobe Acrobat Reader DC for macOS installer (AcroRdrDC_2200220191_MUI.pkg) contains a local privilege escalation vulnerability.

Adobe Acrobat Reader versions 23.001.20093 and earlier and 20.005.30441 and earlier are affected by a Creation of Temporary File in Directory with Incorrect Permissions vulnerability that could result in privilege escalation in the context of the current user. Exploitation of this issue requires...

CVE-2023-26396

CVE-2023-26396 affects Adobe Acrobat Reader Desktop (versions 23.001.20093 and earlier; 20.005.30441 and earlier). The issue is a Creation of Temporary File in Directory with Incorrect Permissions that could enable privilege escalation within the current user context. Exploitation requires user i...

CVE-2023-26423

CVE-2023-26423 affects Adobe Acrobat Reader DC (Classic/Continuous) and was linked to a Use-After-Free vulnerability that could lead to arbitrary code execution under the context of the current user. Affected components include Acrobat Reader versions 23.001.20093 and earlier, and 20.005.30441 an...

CVE-2023-26425

Technical details for CVE-2023-26425 are not publicly available in the provided documents. The connected sources reference the vulnerability broadly but do not specify affected product versions, root cause, impact, or remediation. Monitor for updates.

Adobe Acrobat Reader 缓冲区错误漏洞

Adobe Acrobat Reader is a PDF viewer from the American company Audobee Adobe. The software is used to print, sign and annotate PDF. Adobe Acrobat Reader has an out-of-bounds write vulnerability that can be exploited by an attacker to execute arbitrary code in the context of the current user...

Adobe Acrobat Reader DC AcroForm insertItemAt Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Acrobat Reader DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handli...

CVE-2023-26423 ZDI-CAN-20160: Adobe Acrobat Reader DC AcroForm insertItemAt Use-After-Free Remote Code Execution Vulnerability

Adobe Acrobat Reader versions 23.001.20093 and earlier and 20.005.30441 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a...

Adobe Acrobat Reader 资源管理错误漏洞

Adobe Acrobat Reader is a PDF viewer from the American company Audobee Adobe. The software is used to print, sign and annotate PDF. Adobe Acrobat Reader suffers from a resource management error vulnerability that stems from the presence of a post-release reuse issue, which can be exploited by an...

CVE-2023-26417 ZDI-CAN-20583: Adobe Acrobat Reader DC Popup Use-After-Free Remote Code Execution Vulnerability

Adobe Acrobat Reader versions 23.001.20093 and earlier and 20.005.30441 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a...

CVE-2023-26407

CVE-2023-26407 affects Adobe Acrobat Reader versions 23.001.20093 and earlier, and 20.005.30441 and earlier, with an Improper Input Validation vulnerability that could lead to arbitrary code execution in the context of the current user. Exploitation requires user interaction to open a malicious f...

CVE-2023-26406 ZDI-CAN-20712: Net.HTTP.request URL restriction bypass

Adobe Acrobat Reader versions 23.001.20093 and earlier and 20.005.30441 and earlier are affected by an Improper Access Control vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must...

CVE-2023-26418

Technical details for CVE-2023-26418 are not publicly available in the provided documents; monitor for updates.

CVE-2023-26397 [ZS-VR-22-112] Adobe Acrobat Out-of-bounds Read Memory leak

Adobe Acrobat Reader versions 23.001.20093 and earlier and 20.005.30441 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue...

CVE-2023-26405

CVE-2023-26405 concerns Adobe Acrobat Reader (versions 23.001.20093 and earlier; 20.005.30441 and earlier). The issue is an improper input validation vulnerability in Acrobat Reader that can lead to arbitrary code execution in the context of the current user. Exploitation requires user interactio...

CVE-2023-26406

CVE-2023-26406 affects Adobe Acrobat Reader (versions 23.001.20093 and earlier; 20.005.30441 and earlier). The issue is an improper access control that could allow arbitrary code execution in the context of the current user. Exploitation requires user interaction: a victim must open a malicious f...

CVE-2023-26422

Technical details about CVE-2023-26422 (affected Adobe Acrobat versions, root cause, impact, and fixes) are not publicly provided in the connected documents. Monitor for updates.

CVE-2023-26397

CVE-2023-26397 affects Adobe Acrobat Reader versions 23.001.20093 and 20.005.30441 (and earlier). The issue is an out-of-bounds read in a component that could disclose sensitive memory and bypass mitigations such as ASLR. Exploitation requires user interaction—an attacker must lure a user to open...

Adobe Acrobat Reader DC PDF Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Acrobat Reader DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...