Adobe Acrobat and Reader Out-of-Bounds Write Vulnerability. Actively exploited: CISA added this vulnerability to its Known Exploited Vulnerabilities catalog on 14/09/2023. Patch affected systems as an emergency.
| Package | Affected versions | Patched versions |
|---|---|---|
| acrobat | ≥ 20.001.3005, < 20.005.30524 | 20.005.30524 |
| acrobat dc | ≥ 15.007.20033, < 23.006.20320 | 23.006.20320 |
| acrobat reader | ≥ 20.001.3005, < 20.005.30524 | 20.005.30524 |
| acrobat reader dc | ≥ 15.007.20033, < 23.006.20320 | 23.006.20320 |
Acrobat Reader versions 23.003.20284 (and earlier), 20.005.30516 (and earlier) and 20.005.30514 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free