High severity7.8CISA KEVNVD Advisory· Published Sep 13, 2023· Updated Jun 17, 2026
CVE-2023-26369
CVE-2023-26369
Description
Acrobat Reader versions 23.003.20284 (and earlier), 20.005.30516 (and earlier) and 20.005.30514 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Affected products
6cpe:2.3:a:adobe:acrobat:*:*:*:*:classic:*:*:*+ 4 more
- cpe:2.3:a:adobe:acrobat:*:*:*:*:classic:*:*:*range: >=20.001.3005,<20.005.30524
- cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*range: >=15.007.20033,<23.006.20320
- cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:classic:*:*:*range: >=20.001.3005,<20.005.30524
- (no CPE)range: <=23.003.20284, <=20.005.30516, <=20.005.30514
- (no CPE)range: 0
- cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*Range: >=15.007.20033,<23.006.20320
Patches
Vulnerability mechanics
References
2- helpx.adobe.com/security/products/acrobat/apsb23-34.htmlnvdVendor Advisory
- www.cisa.gov/known-exploited-vulnerabilities-catalognvdThird Party AdvisoryUS Government Resource
News mentions
0No linked articles in our index yet.