Multiple vulnerabilities in Adobe Acrobat and Adobe Acrobat Reader

Description

Multiple vulnerabilities were found in Adobe Acrobat and Adobe Acrobat Reader. Malicious users can exploit these vulnerabilities to cause denial of service, execute arbitrary code, gain privileges, obtain sensitive information.

Below is a complete list of vulnerabilities:

1. Null Pointer Dereference vulnerability can be exploited to cause denial of service.
2. Use after free vulnerability can be exploited to cause execute arbitrary code.
3. Elevation of privilege vulnerability can be exploited remotely to gain privileges.
4. Out of bounds write vulnerability can be exploited to cause execute arbitrary code.
5. Stack-based buffer overflow vulnerability can be exploited to execute arbitrary code.
6. Heap buffer overflow vulnerability can be exploited to cause denial of service.
7. Integer overflow vulnerability can be exploited to cause execute arbitrary code.
8. Out of bounds read vulnerability can be exploited to cause obtain sensitive information.
9. Input validation vulnerability can be exploited to execute arbitrary code.
10. Out of bounds write vulnerability can be exploited to execute arbitrary code.

Original advisories

• APSB23-01

Exploitation

Public exploits exist for this vulnerability.

Malware exists for this vulnerability. Usually such malware is classified as Exploit. More details.

Related products

• Adobe-Acrobat-Reader-DC-Continuous
• Adobe-Acrobat-DC-Continuous
• Adobe-Acrobat-Reader-2020
• Adobe-Acrobat-2020

CVE list

• CVE-2023-21586
  unknown
• CVE-2023-21608
  critical
• CVE-2023-21611
  critical
• CVE-2023-21606
  critical
• CVE-2023-21609
  critical
• CVE-2023-21604
  critical
• CVE-2023-21610
  critical
• CVE-2023-21605
  critical
• CVE-2023-21579
  critical
• CVE-2023-21612
  critical
• CVE-2023-21581
  high
• CVE-2023-21613
  high
• CVE-2023-21585
  high
• CVE-2023-21614
  high
• CVE-2023-21607
  critical
• CVE-2023-22241
  critical
• CVE-2023-22242
  critical
• CVE-2023-22240
  critical

Read more

Find out the statistics of the vulnerabilities spreading in your region on statistics.securelist.com