CVE-2023-26424: ZDI-CAN-19833: Adobe Acrobat Reader DC PDF Parsing Use-After-Free Remote Code Execution Vulnerability
First published: Wed Apr 12 2023(Updated: )
Adobe Acrobat Reader versions 23.001.20093 (and earlier) and 20.005.30441 (and earlier) are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Credit: psirt@adobe.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Adobe Acrobat Reader | >=20.001.3005<=20.005.30441 | |
| Adobe Acrobat Dc | >=15.008.20082<=23.001.20093 | |
| Adobe Acrobat Reader | >=20.001.3005<=20.005.30441 | |
| Adobe Acrobat Reader DC | >=15.008.20082<=23.001.20093 | |
| Apple macOS | ||
| Microsoft Windows |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Frequently Asked Questions
What is Adobe Acrobat Reader versions 23.001.20093 (and earlier) and 20.005.30441 (and earlier) vulnerability?
Adobe Acrobat Reader versions 23.001.20093 (and earlier) and 20.005.30441 (and earlier) are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user.
How severe is the CVE-2023-26424 vulnerability?
The severity of CVE-2023-26424 vulnerability is high with a severity score of 7.8.
What software versions are affected by CVE-2023-26424 vulnerability?
Adobe Acrobat Reader versions 23.001.20093 (and earlier) and 20.005.30441 (and earlier) are affected by the CVE-2023-26424 vulnerability.
What is the impact of CVE-2023-26424 vulnerability?
The impact of CVE-2023-26424 vulnerability is that an attacker could execute arbitrary code in the context of the current user.
How can I fix the CVE-2023-26424 vulnerability?
To fix the CVE-2023-26424 vulnerability, update Adobe Acrobat Reader to a version that is not affected by the vulnerability.
- agent/type
- collector/nvd-index
- agent/software-canonical-lookup-request
- agent/weakness
- agent/author
- agent/references
- agent/softwarecombine
- agent/description
- collector/mitre-cve
- source/MITRE
- agent/severity
- agent/title
- agent/last-modified-date
- agent/event
- agent/tags
- agent/first-publish-date
- vendor/adobe
- canonical/adobe acrobat reader
- version/adobe acrobat reader/20.001.3005
- version/adobe acrobat reader/20.005.30441
- canonical/adobe acrobat dc
- version/adobe acrobat dc/15.008.20082
- version/adobe acrobat dc/23.001.20093
- canonical/adobe acrobat reader dc
- version/adobe acrobat reader dc/15.008.20082
- version/adobe acrobat reader dc/23.001.20093
- vendor/apple
- canonical/apple macos
- vendor/microsoft
- canonical/microsoft windows