Multiple vulnerabilities in Adobe Acrobat and Adobe Acrobat Reader

説明

Multiple vulnerabilities were found in Adobe Acrobat and Adobe Acrobat Reader. Malicious users can exploit these vulnerabilities to execute arbitrary code, bypass security restrictions, obtain sensitive information, gain privileges.

Below is a complete list of vulnerabilities:

1. Input validation vulnerability can be exploited to execute arbitrary code
2. Out of bounds read vulnerability can be exploited to execute arbitrary code.
3. Use after free vulnerability can be exploited execute arbitrary code.
4. Out of bounds write vulnerability can be exploited to execute arbitrary code.
5. Input validation vulnerability can be exploited to execute arbitrary code.
6. Improper Access Control vulnerability can be exploited to bypass security restrictions.
7. Integer Underflow (Wrap or Wraparound) vulnerability can be exploited to execute arbitrary code
8. Improper Access Control vulnerability can be exploited to bypass security restrictions
9. Out of bounds read vulnerability can be exploited to obtain sensitive information.
10. Elevation of privilege vulnerability can be exploited remotely to gain privileges.

オリジナルアドバイザリー

• APSB23-24

関連製品

• Adobe-Acrobat-Reader-DC-Continuous
• Adobe-Acrobat-DC-Continuous
• Adobe-Acrobat-Reader-2020
• Adobe-Acrobat-2020

CVEリスト

• CVE-2023-26405
  critical
• CVE-2023-26425
  critical
• CVE-2023-26417
  critical
• CVE-2023-26419
  critical
• CVE-2023-26423
  critical
• CVE-2023-26395
  critical
• CVE-2023-26407
  critical
• CVE-2023-26422
  critical
• CVE-2023-26408
  critical
• CVE-2023-26424
  critical
• CVE-2023-26421
  critical
• CVE-2023-26418
  critical
• CVE-2023-26406
  critical
• CVE-2023-26397
  high
• CVE-2023-26420
  critical
• CVE-2023-26396
  critical

も参照してください

お住まいの地域に広がる脆弱性の統計をご覧ください statistics.securelist.com