CVE-2023-26396: Adobe Acrobat Reader DC for macOS installer (AcroRdrDC_2200220191_MUI.pkg) contains a local privilege escalation vulnerability.
First published: Wed Apr 12 2023(Updated: )
Adobe Acrobat Reader versions 23.001.20093 (and earlier) and 20.005.30441 (and earlier) are affected by a Creation of Temporary File in Directory with Incorrect Permissions vulnerability that could result in privilege escalation in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Credit: psirt@adobe.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Adobe Acrobat Reader | >=20.001.3005<=20.005.30441 | |
| Adobe Acrobat | >=15.008.20082<=23.001.20093 | |
| Adobe Acrobat Reader | >=20.001.3005<=20.005.30441 | |
| Adobe Acrobat Reader | >=15.008.20082<=23.001.20093 | |
| Apple macOS | ||
| Microsoft Windows |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Frequently Asked Questions
What is the severity of CVE-2023-26396?
CVE-2023-26396 has a severity rating indicating a risk of privilege escalation affecting certain versions of Adobe Acrobat and Adobe Acrobat Reader.
How do I fix CVE-2023-26396?
To fix CVE-2023-26396, users should update their Adobe Acrobat or Adobe Acrobat Reader to the latest version provided by Adobe.
Which versions of Adobe Acrobat are affected by CVE-2023-26396?
CVE-2023-26396 affects Adobe Acrobat Reader versions 20.005.30441 and earlier, and Adobe Acrobat DC versions 23.001.20093 and earlier.
Can CVE-2023-26396 lead to user data compromise?
CVE-2023-26396 can potentially lead to privilege escalation, which may put user data at risk if exploited.
Is CVE-2023-26396 specific to any operating systems?
CVE-2023-26396 specifically affects Adobe Acrobat products regardless of the underlying operating system, such as Windows or macOS.
- agent/type
- agent/author
- agent/references
- agent/weakness
- agent/description
- collector/mitre-cve
- source/MITRE
- agent/severity
- agent/title
- agent/last-modified-date
- agent/first-publish-date
- agent/event
- agent/source
- agent/softwarecombine
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/adobe
- canonical/adobe acrobat reader
- version/adobe acrobat reader/20.001.3005
- version/adobe acrobat reader/20.005.30441
- canonical/adobe acrobat
- version/adobe acrobat/15.008.20082
- version/adobe acrobat/23.001.20093
- version/adobe acrobat reader/15.008.20082
- version/adobe acrobat reader/23.001.20093
- vendor/apple
- canonical/apple macos
- vendor/microsoft
- canonical/microsoft windows