CVE-2024-34098: ZDI-CAN-XXXX: [Pwn2Own] Acrobat sandbox bypass part 1 of 2
Acrobat Reader versions 20.005.30574, 24.002.20736 and earlier are affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-34098?
CVE-2024-34098 has a high severity level as it allows for arbitrary code execution through improper input validation.
How do I fix CVE-2024-34098?
To fix CVE-2024-34098, update Adobe Acrobat and Acrobat Reader to the latest version that is not affected by this vulnerability.
What versions of Adobe Acrobat are impacted by CVE-2024-34098?
Adobe Acrobat versions 20.005.30574, 24.002.20736 and earlier are affected by CVE-2024-34098.
What could happen if CVE-2024-34098 is exploited?
If exploited, CVE-2024-34098 could result in arbitrary code execution in the context of the current user.
Does CVE-2024-34098 require user interaction to be exploited?
Yes, exploitation of CVE-2024-34098 requires user interaction, such as opening a malicious document.