CVE-2022-24091Out-of-bounds Write in Adobe Acrobat Reader

Severity
7.8HIGHNVD
EPSS
7.1%
top 8.45%
CISA KEV
Not in KEV
Exploit
No known exploits
Timeline
PublishedMar 18
Latest updateMar 19

Description

Acrobat Reader DC version 21.007.20099 (and earlier), 20.004.30017 (and earlier) and 17.011.30204 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious font file.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HExploitability: 1.8 | Impact: 5.9

Affected Packages5 packages

CVEListV5adobe/acrobat_readerunspecified21.007.20099+3
NVDadobe/acrobat_reader17.011.3005917.011.30204+1
NVDadobe/acrobat_reader_dc15.008.2008221.007.20099
NVDadobe/acrobat17.011.3005917.011.30204+1
NVDadobe/acrobat_dc15.008.2008221.007.20099

🔴Vulnerability Details

2
GHSA
GHSA-wg83-g6xp-8m93: Acrobat Reader DC version 212022-03-19
CVEList
Adobe Acrobat Reader DC Font Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability2022-03-18
CVE-2022-24091 — Out-of-bounds Write in Adobe | cvebase