CVE-2023-21608
Adobe Acrobat and Reader Use-After-Free Vulnerability
CVSS
—
Sin CVSS
EPSS
61.5%
p99
KEV
SÍ
10 oct 2023
Exploit Today
80
0-100
Publicado: — · Última mod.: —
61.5%EPSS · 30 días61.5%
2026-08-022026-08-31
Producto
Adobe / Acrobat and Reader
Vulnerabilidad
Adobe Acrobat and Reader Use-After-Free Vulnerability
Añadido a KEV
10 oct 2023
Remediar antes de
31 oct 2023
Uso conocido en ransomware
No
Descripción resumida
Adobe Acrobat and Reader contains a use-after-free vulnerability that allows for code execution in the context of the current user.
Acción requerida
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Notas
https://helpx.adobe.com/security/products/acrobat/apsb23-01.html; https://nvd.nist.gov/vuln/detail/CVE-2023-21608
CVECVSSEPSSKEVRExplotTítuloVis.
CVE-2026-346218.6 ALT93.8%
KEV—78Adobe Acrobat and Reader Prototype Pollution Vulnerability4dCVE-2008-2992—99.9%
KEV—80Adobe Reader and Acrobat Input Validation Vulnerability—CVE-2007-5659—99.8%
KEV—80Adobe Acrobat and Reader Buffer Overflow Vulnerability—CVE-2009-3459—99.7%
KEV—80Adobe Acrobat and Reader Heap-Based Buffer Overflow Vulnerability—CVE-2021-21017—99.7%
KEV—80Adobe Acrobat and Reader Heap-based Buffer Overflow Vulnerability—CVE-2009-3953—99.7%
KEV—80Adobe Acrobat and Reader Universal 3D Remote Code Execution Vulnerability—