Adobe Acrobat Reader versions 23.003.20244 (and earlier) and 20.005.30467 (and earlier) are affected by an Access of Uninitialized Pointer vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
References
| Link | Resource |
|---|---|
| https://helpx.adobe.com/security/products/acrobat/apsb23-30.html | Release Notes Vendor Advisory |
| https://helpx.adobe.com/security/products/acrobat/apsb23-30.html | Release Notes Vendor Advisory |
Configurations
Configuration 1 (hide)
| AND |
|
Configuration 2 (hide)
| AND |
|
Configuration 3 (hide)
| AND |
|
History
21 Nov 2024, 08:13
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://helpx.adobe.com/security/products/acrobat/apsb23-30.html - Release Notes, Vendor Advisory |
15 Aug 2023, 13:59
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Apple
Adobe acrobat Reader Adobe Microsoft windows Adobe acrobat Reader Dc Adobe acrobat Microsoft Adobe acrobat Dc Apple macos |
|
| CPE | cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:* cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:* cpe:2.3:a:adobe:acrobat:*:*:*:*:classic:*:*:* cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:classic:*:*:* cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:* cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:* |
|
| References | (MISC) https://helpx.adobe.com/security/products/acrobat/apsb23-30.html - Release Notes, Vendor Advisory |
10 Aug 2023, 14:47
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2023-08-10 14:15
Updated : 2024-11-21 08:13
NVD link : CVE-2023-38226
Mitre link : CVE-2023-38226
CVE.ORG link : CVE-2023-38226
JSON object : View
Products Affected
adobe
- acrobat
- acrobat_reader
- acrobat_dc
- acrobat_reader_dc
microsoft
- windows
apple
- macos
CWE
CWE-824
Access of Uninitialized Pointer