Acrobat Reader versions 20.005.30636, 24.002.20965, 24.002.20964, 24.001.30123 and earlier are affected by a Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability that could lead to privilege escalation. Exploitation of this issue require local low-privilege access to the affected system and attack complexity is high.
References
| Link | Resource |
|---|---|
| https://helpx.adobe.com/security/products/acrobat/apsb24-57.html | Vendor Advisory |
Configurations
Configuration 1 (hide)
| AND |
|
History
17 Jun 2026, 07:41
| Type | Values Removed | Values Added |
|---|---|---|
| Summary |
|
15 Aug 2024, 17:17
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://helpx.adobe.com/security/products/acrobat/apsb24-57.html - Vendor Advisory | |
| CPE | cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:* cpe:2.3:a:adobe:acrobat:*:*:*:*:classic:*:*:* cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:* cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:classic:*:*:* cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:* cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:* |
|
| First Time |
Adobe
Adobe acrobat Adobe acrobat Dc Apple macos Apple Microsoft Adobe acrobat Reader Dc Adobe acrobat Reader Microsoft windows |
14 Aug 2024, 15:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-08-14 15:15
Updated : 2026-06-17 07:41
NVD link : CVE-2024-39425
Mitre link : CVE-2024-39425
CVE.ORG link : CVE-2024-39425
JSON object : View
Products Affected
adobe
- acrobat_reader
- acrobat
- acrobat_reader_dc
- acrobat_dc
microsoft
- windows
apple
- macos
CWE
CWE-367
Time-of-check Time-of-use (TOCTOU) Race Condition