← CVE Radar
CVE-2023-26369[Google Project Zero] Adobe Acrobat DC OOBW 0-day actively exploited in the wild
Acrobat Reader versions 23.003.20284 (and earlier), 20.005.30516 (and earlier) and 20.005.30514 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
7.8 HIGHEPSS 7.45%⚡ Known Exploited (CISA KEV)NVD: Analyzed
Overview
Severity
| Score | Severity | Version | Vector String |
|---|---|---|---|
| 7.8 | HIGH | 3.1adobe (CNA) | CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H |
CISA required action
⚡ Known exploited · remediation due Oct 5, 2023
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Details
- CVE ID
- CVE-2023-26369
- Status
- Analyzed
- Assigner (CNA)
- adobe
- Published
- Sep 13, 2023
- Last modified
- 2026-06-17 05:43 UTC
- Weaknesses
- CWE-787 · Out-of-bounds Write (CWE-787)
Affected Products
As published by the CNA in the CVE record.
AdobeAcrobat Reader1 version range
- through 20.005.30514