← CVE Radar
CVE-2023-21608Adobe Acrobat Reader DC resetForm Use-After-Free Remote Code Execution Vulnerability
Adobe Acrobat Reader versions 22.003.20282 (and earlier), 22.003.20281 (and earlier) and 20.005.30418 (and earlier) are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
7.8 HIGHEPSS 59.42%⚡ Known Exploited (CISA KEV)NVD: Analyzed
Overview
Severity
| Score | Severity | Version | Vector String |
|---|---|---|---|
| 7.8 | HIGH | 3.1adobe (CNA) | CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H |
CISA required action
⚡ Known exploited · remediation due Oct 31, 2023
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Details
- CVE ID
- CVE-2023-21608
- Status
- Analyzed
- Assigner (CNA)
- adobe
- Published
- Jan 18, 2023
- Last modified
- 2026-06-17 05:33 UTC
- Weaknesses
- CWE-416 · Use After Free (CWE-416)
Affected Products
As published by the CNA in the CVE record.
AdobeAcrobat Reader4 version ranges
- through 20.005.30418
- through 22.003.20282
- through 22.003.20281
- through None