Adobe Acrobat and Reader Use-After-Free Vulnerability. Actively exploited: CISA added this vulnerability to its Known Exploited Vulnerabilities catalog on 10/10/2023. Patch affected systems as an emergency.
| Package | Affected versions | Patched versions |
|---|---|---|
| acrobat | ≥ 20.001.30005, ≤ 20.005.30418 | |
| acrobat dc | ≥ 15.008.20082, ≤ 22.003.20281≥ 15.008.20082, ≤ 22.003.20282 | |
| acrobat reader | ≥ 20.001.30005, ≤ 20.005.30418 | |
| acrobat reader dc | ≥ 15.008.20082, ≤ 22.003.20281≥ 15.008.20082, ≤ 22.003.20282 |
Adobe Acrobat Reader versions 22.003.20282 (and earlier), 22.003.20281 (and earlier) and 20.005.30418 (and earlier) are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free