CVE-2024-34098

CVE Database · CVE-2024-34098

CVE-2024-34098

· HIGHAnalyzed

CVSS v3.1

7.8

EPSS

0.35%

Published

May 15, 2024

Modified

Dec 2, 2024

Public PoC / Exploit (1)

All weaponized →

TrickestTrickest PoC index

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

Acrobat Reader versions 20.005.30574, 24.002.20736 and earlier are affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVSS Vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weaknesses (CWE)

CWE-20

Affected Products (10)

adobe · acrobat_dc (up to 24.002.20759)vulnerable

adobe · acrobat_reader_dc (up to 24.002.20759)vulnerable

apple · macos

microsoft · windows

adobe · acrobat (up to 20.005.30635)vulnerable

adobe · acrobat_reader (up to 20.005.30635)vulnerable

apple · macos

adobe · acrobat (up to 20.005.30636)vulnerable

adobe · acrobat_reader (up to 20.005.30636)vulnerable

microsoft · windows

References (2)

https://helpx.adobe.com/security/products/acrobat/apsb24-29.html

Vendor Advisory

https://helpx.adobe.com/security/products/acrobat/apsb24-29.html

Vendor Advisory

KEV Catalog EPSS Scores Vendors All CVEs