High severity7.8CISA KEVNVD Advisory· Published Jan 18, 2023· Updated Jun 17, 2026
CVE-2023-21608
CVE-2023-21608
Description
Adobe Acrobat Reader versions 22.003.20282 (and earlier), 22.003.20281 (and earlier) and 20.005.30418 (and earlier) are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Affected products
6cpe:2.3:a:adobe:acrobat:*:*:*:*:classic:*:*:*+ 4 more
- cpe:2.3:a:adobe:acrobat:*:*:*:*:classic:*:*:*range: >=20.001.30005,<=20.005.30418
- cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*range: >=15.008.20082,<=22.003.20282
- cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:classic:*:*:*range: >=20.001.30005,<=20.005.30418
- (no CPE)range: <=22.003.20282, <=22.003.20281, <=20.005.30418
- (no CPE)range: unspecified
- cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*Range: >=15.008.20082,<=22.003.20282
Patches
Vulnerability mechanics
References
2- helpx.adobe.com/security/products/acrobat/apsb23-01.htmlnvdVendor Advisory
- www.cisa.gov/known-exploited-vulnerabilities-catalognvdThird Party AdvisoryUS Government Resource
News mentions
0No linked articles in our index yet.