CVE-2024-20748 TALOS-2023-1909 - Adobe Acrobat Reader Font avar SegmentMaps out-of-bounds read vulnerability

Acrobat Reader versions 20.005.30539, 23.008.20470 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user...

CVE-2024-20734

CVE-2024-20734 affects Adobe Acrobat Reader DC/Continuous and related variants, with a Use-After-Free in AcroForm that can disclose memory content. Affected versions include 20.005.30539 and 23.008.20470 and earlier. Exploitation requires user interaction (opening a malicious file) and could bypa...

CVE-2024-20748 TALOS-2023-1909 - Adobe Acrobat Reader Font avar SegmentMaps out-of-bounds read vulnerability

Acrobat Reader versions 20.005.30539, 23.008.20470 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user...

CVE-2024-20728 ZDI-CAN-22727: Adobe Acrobat Pro DC Annotation Out-Of-Bounds Write Remote Code Execution Vulnerability

Acrobat Reader versions 20.005.30539, 23.008.20470 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2024-20728

Acrobat Reader 20.005.30539, 23.008.20470 and earlier are affected by an out-of-bounds write vulnerability that could allow arbitrary code execution in the context of the current user. Exploitation requires user interaction: a victim must open a malicious file. The vulnerability is described in C...

CVE-2024-20736

Adobe Acrobat Reader DC/Reader versions 20.005.30539, 23.008.20470 and earlier are affected by a local out-of-bounds read vulnerability that could disclose memory and bypass ASLR. Exploitation requires user interaction (victim opens a malicious file). CVSSv3.1 base score 5.5 (Medium); confidentia...

CVE-2024-20749 TALOS-2023-1910 - Adobe Acrobat Reader Font CharStrings CharStringsOffset out-of-bounds read vulnerability

Acrobat Reader versions 20.005.30539, 23.008.20470 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user...

CVE-2024-20749 TALOS-2023-1910 - Adobe Acrobat Reader Font CharStrings CharStringsOffset out-of-bounds read vulnerability

Acrobat Reader versions 20.005.30539, 23.008.20470 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user...

CVE-2024-20749

CVE-2024-20749 affects Adobe Acrobat Reader and related components. The advisory notes an out-of-bounds read vulnerability in Acrobat Reader versions such as 20.005.30539, 23.008.20470 and earlier, allowing disclosure of sensitive memory and potential bypass of mitigations like ASLR. Exploitation...

CVE-2024-20729 TALOS-2023-1890 - Adobe Acrobat Reader Annot3D object zoom event use-after-free vulnerability

Acrobat Reader versions 20.005.30539, 23.008.20470 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2024-20735 TALOS-2023-1905 - Adobe Acrobat Reader Font CPAL numColorRecords out-of-bounds read vulnerability

Acrobat Reader versions 20.005.30539, 23.008.20470 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user...

CVE-2024-20729

CVE-2024-20729 affects Adobe Acrobat Reader (DC/Continuous) with Use-After-Free in the Annot3D object zoom handling, impacting v20.005.30539, v23.008.20470 and earlier. The issue can lead to arbitrary code execution in the context of the current user and requires the user to open a malicious file...

CVE-2024-20729 TALOS-2023-1890 - Adobe Acrobat Reader Annot3D object zoom event use-after-free vulnerability

Acrobat Reader versions 20.005.30539, 23.008.20470 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2024-20735

CVE-2024-20735 affects Adobe Acrobat Reader/DC clients (e.g., Acrobat Reader versions 20.005.30539, 23.008.20470 and earlier) via an out-of-bounds read that can disclose memory contents and bypass ASLR. Exploitation requires user interaction (victim opens a malicious file); impact is confidential...

Adobe Acrobat Reader 缓冲区错误漏洞

Adobe Acrobat Reader is the United States of America Audobee Adobe, a PDF viewer. Adobe Acrobat and Reader has an out-of-bounds read vulnerability that can be exploited by an attacker to obtain sensitive information caused by an out-of-bounds read...

Adobe Acrobat Reader 缓冲区错误漏洞

Adobe Acrobat Reader is the United States of America Audobee Adobe, a PDF viewer. Adobe Acrobat and Reader has an out-of-bounds read vulnerability that can be exploited by an attacker to obtain sensitive information caused by an out-of-bounds read...

Adobe Acrobat Reader 输入验证错误漏洞

Adobe Acrobat Reader is the United States of America Audobee Adobe, a PDF viewer. An input validation error vulnerability exists in Adobe Acrobat and Reader, which can be exploited by an attacker to cause a denial of service...

Adobe Acrobat Reader 缓冲区错误漏洞

Adobe Acrobat Reader is the United States of America Audobee Adobe, a PDF viewer. Adobe Acrobat and Reader has an out-of-bounds read vulnerability that can be exploited by an attacker to obtain sensitive information caused by an out-of-bounds read...

Adobe Acrobat Reader Resource Management Error Vulnerability

Adobe Acrobat Reader is a PDF viewer from the American company Audobee Adobe. The software is used to print, sign and annotate PDFs. A resource management error vulnerability previously existed in Adobe Acrobat Reader versions 20.005.30539 and 23.008.20470, which stemmed from the presence of a...

Adobe Acrobat Reader 缓冲区错误漏洞

Adobe Acrobat Reader is the United States of America Audobee Adobe, a PDF viewer. Adobe Acrobat and Reader has an out-of-bounds read vulnerability that can be exploited by an attacker to obtain sensitive information caused by an out-of-bounds read...