5.5Mittel

CVE-2026-81984Acrobat Reader | Use After Free (CWE-416)

Adobe Adobe Acrobat; Adobe Acrobat Reader; Adobe Acrobat 2024 Veröffentlicht: (vor 2 Monaten)

Beschreibung

Acrobat Reader is affected by a Use After Free vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Schwachstellentyp (CWE): CWE-416

Daten: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Wiedergegeben wie in der Quelle, auf Englisch.

Betroffene Produkte und Versionen

HerstellerProduktVersionen
adobe acrobat 24.001.20604 – < 24.001.30429
Adobe Acrobat 2024 ≤ 24.001.30383, fixed 24.001.30429
adobe acrobat dc 15.008.20082 – < 26.002.21901
Adobe Acrobat Reader ≤ 26.002.21900, fixed 26.002.21901
adobe acrobat reader dc 15.008.20082 – < 26.002.21901
Adobe Adobe Acrobat ≤ 26.002.21900, fixed 26.002.21901

Referenzen und Patches

CPE-Treffer (NVD) (3)

  • cpe:2.3:a:adobe:acrobat:*:*:*:*:classic:*:*:* ≥ 24.001.20604 < 24.001.30429
  • cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:* ≥ 15.008.20082 < 26.002.21901
  • cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:* ≥ 15.008.20082 < 26.002.21901