CVE-2023-26369

Known Exploited Vulnerability

Adobe Acrobat and Reader Out-of-Bounds Write Vulnerability

Vendor / product: Adobe / Acrobat and Reader

Description

Acrobat Reader versions 23.003.20284 (and earlier), 20.005.30516 (and earlier) and 20.005.30514 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Weakness classification

• CWE-787: Out-of-bounds Write

Primary references

• psirt@adobe.com — Vendor Advisory
• af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory
• 134c704f-9b21-4f2e-91b3-4a467353bcc0 — Third Party Advisory, US Government Resource