Adobe Acrobat and Reader Double Free Vulnerability. Actively exploited: CISA added this vulnerability to its Known Exploited Vulnerabilities catalog on 08/06/2022. Patch affected systems as an emergency.
| Package | Affected versions | Patched versions |
|---|---|---|
| acrobat dc | ≥ 15.006.30060, ≤ 15.006.30417≥ 15.008.20082, ≤ 18.011.20038≥ 17.011.30059, ≤ 17.011.30079 | |
| acrobat reader dc | ≥ 15.006.30060, ≤ 15.006.30417≥ 15.008.20082, ≤ 18.011.20038≥ 17.011.30059, ≤ 17.011.30079 |
Adobe Acrobat and Reader versions 2018.011.20038 and earlier, 2017.011.30079 and earlier, and 2015.006.30417 and earlier have a Double Free vulnerability. Successful exploitation could lead to arbitrary code execution in the context of the current user.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free