CVE-2024-41869
published 2024-09-13CVE-2024-41869: Acrobat Reader versions 24.002.21005, 24.001.30159, 20.005.30655, 24.003.20054 and earlier are affected by a Use After Free vulnerability that could result in…
high7.8CVSS 3.1
AVLACLPRNUIRSUCHIHAH
Acrobat Reader versions 24.002.21005, 24.001.30159, 20.005.30655, 24.003.20054 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Affected
6 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| adobe | acrobat | < 20.005.30680 | 20.005.30680 |
| adobe | acrobat | >= 24.001.0 < 24.001.30187 | 24.001.30187 |
| adobe | acrobat_dc | >= 24.003.0 < 24.003.20112 | 24.003.20112 |
| adobe | acrobat_reader | < 20.005.30680 | 20.005.30680 |
| adobe | acrobat_reader | <= 24.003.20054 | — |
| adobe | acrobat_reader_dc | >= 24.003.0 < 24.003.20112 | 24.003.20112 |
CVSS provenance
nvdv3.17.8HIGHCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
vulncheck7.8HIGH