CVE-2023-26420

Adobe Acrobat Reader versions 23.001.20093 (and earlier) and 20.005.30441 (and earlier) are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
References
Configurations

Configuration 1 (hide)

AND
OR cpe:2.3:a:adobe:acrobat:*:*:*:*:classic:*:*:*
cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*
cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:classic:*:*:*
cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*
OR cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*

History

No history.

Information

Published : 2023-04-12 21:15

Updated : 2024-02-28 20:13


NVD link : CVE-2023-26420

Mitre link : CVE-2023-26420

CVE.ORG link : CVE-2023-26420


JSON object : View

Products Affected

adobe

  • acrobat
  • acrobat_reader_dc
  • acrobat_reader
  • acrobat_dc

apple

  • macos

microsoft

  • windows
CWE
CWE-416

Use After Free