logo

CVE-2023-21608 - Adobe Acrobat and Reader Use-After-Free Vulnerability

Project:Adobe

Product:Acrobat and Reader

Date Added:2023-10-10Due Date:2023-10-31

Vulnerability Name

Adobe Acrobat and Reader Use-After-Free Vulnerability

Description

Adobe Acrobat and Reader contains a use-after-free vulnerability that allows for code execution in the context of the current user.

Known To Be Used in Ransomware Campaigns?

Unknown

Action

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Additional Notes

https://helpx.adobe.com/security/products/acrobat/apsb23-01.html

https://nvd.nist.gov/vuln/detail/CVE-2023-21608