CVE-2024-41879Out-of-bounds Write in Adobe Acrobat Reader

Severity
7.8HIGHNVD
EPSS
1.7%
top 17.55%
CISA KEV
Not in KEV
Exploit
No known exploits
Timeline
PublishedAug 26

Description

Acrobat Reader versions 127.0.2651.105 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HExploitability: 1.8 | Impact: 5.9

Affected Packages2 packages

CVEListV5adobe/acrobat_reader127.0.2651.105
NVDmicrosoft/edge< 128.0.2739.42

Patches

🔴Vulnerability Details

2
GHSA
GHSA-6xfm-jchr-8jgw: Acrobat Reader versions 1272024-08-26
CVEList
RE: New Edge T5 MSRC Case [DCMSFT-1294]2024-08-26

📋Vendor Advisories

1
Microsoft
Adobe Systems Incorporated: CVE-2024-41879 Adobe PDF Viewer Remote Code Execution Vulnerability2024-08-13
CVE-2024-41879 — Out-of-bounds Write in Adobe | cvebase