CVE-2023-26424: ZDI-CAN-19833: Adobe Acrobat Reader DC PDF Parsing Use-After-Free Remote Code Execution Vulnerability
Adobe Acrobat Reader versions 23.001.20093 (and earlier) and 20.005.30441 (and earlier) are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Affected Software
Event History
Frequently Asked Questions
What is Adobe Acrobat Reader versions 23.001.20093 (and earlier) and 20.005.30441 (and earlier) vulnerability?
Adobe Acrobat Reader versions 23.001.20093 (and earlier) and 20.005.30441 (and earlier) are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user.
How severe is the CVE-2023-26424 vulnerability?
The severity of CVE-2023-26424 vulnerability is high with a severity score of 7.8.
What software versions are affected by CVE-2023-26424 vulnerability?
Adobe Acrobat Reader versions 23.001.20093 (and earlier) and 20.005.30441 (and earlier) are affected by the CVE-2023-26424 vulnerability.
What is the impact of CVE-2023-26424 vulnerability?
The impact of CVE-2023-26424 vulnerability is that an attacker could execute arbitrary code in the context of the current user.
How can I fix the CVE-2023-26424 vulnerability?
To fix the CVE-2023-26424 vulnerability, update Adobe Acrobat Reader to a version that is not affected by the vulnerability.