Exploitation ongoing with high activity in latest observed window (1 mentions)
Recommended action window: Immediate (within 24h)
NVD description
Acrobat Reader versions 23.003.20284 (and earlier), 20.005.30516 (and earlier) and 20.005.30514 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Listed in the CISA Known Exploited Vulnerabilities catalog. Federal remediation due date: 2023-10-05. Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Priority
MEDIUM
Exploitation
ACTIVE
PoC
NONE
Patch
AVAILABLE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 6 products
🗞️ Adobe released an urgent update for a critical zero-day vulnerability (CVE-2023-26369) in Acrobat and Reader. The flaw allows arbitrary code execution via malicious PDFs and is currently being exploited.
Post summary
Adobe has issued an urgent patch for CVE-2023-26369, a critical zero‑day that allows arbitrary code execution via malicious PDFs, and the vulnerability is actively being exploited in the wild.
6 of 6 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | adobe | acrobat | - | - | - |
| App | adobe | acrobat_dc | - | - | - |
| App | adobe | acrobat_reader | - | - | - |
| App | adobe | acrobat_reader_dc | - | - | - |
| OS | apple | macos | - | - | - |
| OS | microsoft | windows | - | - | - |