← Back

CVE-2023-44338

nvd nist
Published: Nov 16, 2023Modified: Jun 17, 2026

JSON object

Loading...
7.8
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Exploitability: 1.8 / Impact: 5.9
Source: NVD

Description

Adobe Acrobat Reader versions 23.006.20360 (and earlier) and 20.005.30524 (and earlier) are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Affected (4)

4 products
Acrobat Dc
Acrobat Reader Dc
Acrobat
Acrobat Reader
Configuration A
2 vulnerable
Vulnerable SoftwareAffected Versions
15.008.20082 ≤ version < 23.006.20380
15.008.20082 ≤ version < 23.006.20380
Configuration B
2 vulnerable · 2 platform
Vulnerable SoftwareAffected Versions
20.001.30005 ≤ version ≤ 20.005.30539
20.001.30005 ≤ version < 20.005.30539
Running on/withPlatform Versions
Apple
Macos
All versions
Microsoft
Windows
All versions

References (2)

Source: af854a3a-2127-422b-91ae-364da2661108
Broken Link

Timeline

No history available yet.