CVE-2023-21608
Adobe Acrobat and Reader Use-After-Free Vulnerability
CVSS
—
Sem CVSS
EPSS
59.4%
p99
KEV
SIM
10 de out. de 2023
Exploit Today
80
0-100
Publicado: — · Última mod.: —
59.2%EPSS · 30 dias61.5%
2026-10-082026-11-05
Produto
Adobe / Acrobat and Reader
Vulnerabilidade
Adobe Acrobat and Reader Use-After-Free Vulnerability
Adicionado ao KEV
10 de out. de 2023
Corrigir até
31 de out. de 2023
Uso conhecido em ransomware
Não
Descrição resumida
Adobe Acrobat and Reader contains a use-after-free vulnerability that allows for code execution in the context of the current user.
Ação necessária
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Notas
https://helpx.adobe.com/security/products/acrobat/apsb23-01.html; https://nvd.nist.gov/vuln/detail/CVE-2023-21608
CVECVSSEPSSKEVRExploitTítuloMod.
CVE-2026-346218.6 ALT94.3%
KEV—78Adobe Acrobat and Reader Prototype Pollution Vulnerability10dCVE-2008-2992—100.0%
KEV—80Adobe Reader and Acrobat Input Validation Vulnerability—CVE-2007-5659—99.8%
KEV—80Adobe Acrobat and Reader Buffer Overflow Vulnerability—CVE-2021-21017—99.7%
KEV—80Adobe Acrobat and Reader Heap-based Buffer Overflow Vulnerability—CVE-2009-3459—99.7%
KEV—80Adobe Acrobat and Reader Heap-Based Buffer Overflow Vulnerability—CVE-2009-4324—99.7%
KEV—80Adobe Acrobat and Reader Use-After-Free Vulnerability—