Acrobat Reader Vulnerability Could Lead to Arbitrary Code Execution
CVE-2024-41869

7.8HIGH

Key Information:

Vendor

Adobe
Status
Acrobat Reader
Vendor
CVE Published:
13 September 2024

Badges

đź“° News Worthy

What is CVE-2024-41869?

CVE-2024-41869 is a vulnerability in Adobe Acrobat Reader that could lead to arbitrary code execution. It affects various versions of Acrobat Reader and requires user interaction to exploit. There is currently no evidence of exploitation by ransomware groups. Adobe has released a fix, but a PoC exploit for the vulnerability has been detected, prompting users to apply the update as soon as possible to mitigate potential risks.

Affected Version(s)

Acrobat Reader 0 <= 24.003.20054

News Articles

favicon imageHelp Net Security

Adobe completes fix for Reader bug with known PoC exploit (CVE-2024-41869) - Help Net Security

Among the security updates released by Adobe on Tuesday are those for Acrobat and Reader, which fix CVE-2024-45112 and CVE-2024-41869.

References

https://helpx.adobe.com/security/products/acrobat/apsb24-...
vendor-advisory

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • đź“°

    First article discovered by Help Net Security

  • Vulnerability Reserved

.
CVE-2024-41869 : Acrobat Reader Vulnerability Could Lead to Arbitrary Code Execution