CVE-2024-39422: ZDI-CAN-24090: New Vulnerability Report - Use-after-free remote code execution vulnerability in Adobe Acrobat Reader DC
Acrobat Reader versions 20.005.30636, 24.002.20965, 24.002.20964, 24.001.30123 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-39422?
The severity of CVE-2024-39422 is classified as critical due to the potential for arbitrary code execution.
How do I fix CVE-2024-39422?
To fix CVE-2024-39422, update Adobe Acrobat Reader or Adobe Acrobat DC to the latest version.
What versions of Adobe Acrobat are affected by CVE-2024-39422?
Adobe Acrobat Reader versions 20.005.30636, 24.002.20965, 24.002.20964, 24.001.30123, and earlier are affected by CVE-2024-39422.
Is user interaction required to exploit CVE-2024-39422?
Yes, exploitation of CVE-2024-39422 requires user interaction.
What types of systems are vulnerable to CVE-2024-39422?
CVE-2024-39422 affects Adobe Acrobat products but does not include vulnerabilities on systems like Apple macOS or Microsoft Windows itself.