DocViewerExploitApp

DocViewerExploit App - CVE-2021-40724 これは、MobileHackingLab による Document Viewer を悪用するためのソースコードです。 脆弱なアプリについて これは、MobileHackingLab DocumentViewer Androidアプリの動的コードローディングRCEチャレンジ のエクスプロイトアプリです。 このチャレンジは、Adobe Acrobat Reader Androidアプリで特定された脆弱性 CVE-2021-40724 をエミュレートしています。...

CVE-2023-21608

CVE-2023-21608 Discord Server このバグは、オブジェクトメモリ参照の処理中に resetForm 操作で発生した Use after Free です。 ブログ Adobe Acrobat Reader - resetForm - CAgg UaF - RCE Exploit - CVE-2023-21608 アドバイザリ CVE-2023-21608 デモ...

CVE-2026-34621

CVE-2026-34621 : Adobe Acrobat 2026 프로토타입 오염 및 JS 인젝션 체인 — 연구 PoC 개요 이 레포지토리는 2026년 Adobe Acrobat Reader의 실제 익스플로잇 체인 분석 중 개발된 연구 자료와 개념 증명 코드를 포함합니다. 해당 체인은 다음을 포함합니다: 프로토타입 오염 내부 JavaScript 인젝션 신뢰된 워크플로우 악용 패치 차이 분석 권한 있는 JavaScript 실행 이 연구는 악성 PDF 문서에 사용된 취약점 체인을 이해하고 Adobe가 여러 패치를 통해 도입한 수정 사...

CVE-2021-39863

CVE-2021-39863 Adobe Acrobat Reader DC 21.005.20048.43252 32비트 이 버전 다운로드: https://ardownload2.adobe.com/pub/adobe/reader/win/AcrobatDC/2100520048/AcroRdrDC2100520048enUS.exe ASLR, DEP 우회 CFG 우회 불가 분석 팀 블로그 팀원 블로그 - mntly Adobe root cause.pdf : CVE-2021-39863의 근본 원인 설명 ExploitPoint.c : 취약 함수 리버싱...

Exploit-CVE-2021-21086

CVE-2021-21086 エクスプロイト このエクスプロイトは、Windows 10 上の Adobe Acrobat Reader DC 2020.013.20074 およびそれ以前のバージョンのレンダリングプロセスのコンテキストでシェルコードを実行できます。 注: この例で使用されているシェルコードは calc を起動します。これを機能させるには、Adobe Reader のサンドボックスを無効にする必要があります。または、別のシェルコードに置き換えることもできます。 サンドボックスを無効にした状態で 動作を こちら で確認できます。 詳細については、ブログ記事 をお読みください...

cve-2018-12798

Adobe Acrobat Reader 堆溢出远程代码执行漏洞 漏洞 内存缓冲区边界内操作限制不当漏洞 漏洞描述 该漏洞允许远程攻击者在受影响的 Adobe Acrobat Pro DC 安装中执行任意代码。利用此漏洞需要用户交互，即目标必须访问恶意页面或打开恶意文件。 具体缺陷存在于 Unicode 字符串的处理过程中。在解析过程中，进程在将用户提供的数据复制到固定长度的基于堆的缓冲区之前，未正确验证其长度。攻击者可以利用此漏洞在当前进程上下文中执行代码。 CVE 编号 CVE-2018-12798 厂商 www.adobe.com 产品 Acrobat DC...

PoC-CVE-2020-9715

CVE-2020-9715 EDR 검증 PoC Adobe Acrobat Reader DC의 EScript.api ESObject 캐시에서 발생하는 Use-after-free 취약점입니다. 공인된 레드팀 EDR 테스트 전용입니다. 취약점 Adobe Acrobat Reader DC = 2020.009.20063. EScript 엔진은 데이터 ESObject를 원래 인코딩ANSI 또는 유니코드을 유지하는 키로 캐시합니다. 삭제 시 항상 유니코드 키가 생성되므로 ANSI 이름의 항목은 캐시에서 제거되지 않습니다. GC가 기본 객체를 해...

CVE-2026-3462

CVE-2026-3462 Acrobat Reader | オブジェクトプロトタイプ属性の不適切な制御（'プロトタイプ汚染'）（CWE-1321） CVE-2026-34621 - 高度なクロスプラットフォームエクスプロイトジェネレーター =========================================================== Adobe Acrobat/Reader のプロトタイプ汚染およびサンドボックスエスケープの脆弱性を悪用する悪意のあるPDFを生成します。 特徴: OS自動検出（Windows、macOS、モバイルフォールバック）...

CVE-2023-21608

CVE-2023-21608 Adobe Acrobat Reader - CVE-2023-21608 - リモートコード実行エクスプロイト ブログ https://medium.com/@Kushagra007/adobe-acrobat-reader-resetform-cagg-uaf-rce-exploit-cve-2023-21608-652624346c8f デモ https://user-images.githubusercontent.com/86009160/218384322-c012229a-1a29-4b2d-b107-b55747e4ee10.mp4...

CVE-2026-81997

Acrobat Reader is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploitation of this issue requires user interaction in that a victi...

CVE-2026-82001

Acrobat Reader is affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability to exhaust system resources, resulting in an application denial-of-service condition. Exploitation of this issue requires...

CVE-2026-81996

Acrobat Reader is affected by an Incorrect Authorization vulnerability that could result in privilege escalation. A low-privileged attacker could exploit this vulnerability to gain elevated access. Exploitation of this issue does not require user interaction. Scope is changed...

CVE-2026-81993

Acrobat Reader is affected by a Heap-based Buffer Overflow vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue requires user interaction in that a victim must open a malicious...

CVE-2026-81994

Acrobat Reader is affected by an Improperly Controlled Modification of Object Prototype Attributes 'Prototype Pollution' vulnerability that could lead to arbitrary file system read. An attacker could exploit this vulnerability to access sensitive files and directories outside the intended access...

CVE-2026-81987

Acrobat Reader is affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2026-81988

Acrobat Reader is affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2026-81991

Acrobat Reader is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2026-81985

Acrobat Reader is affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2026-81990

Acrobat Reader is affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2026-81986

Acrobat Reader is affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...