Vulnerabilities > CVE-2024-39383 - Use After Free vulnerability in Adobe products

CVSS 7.8 - HIGH

Attack vector

LOCAL

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

HIGH

Integrity impact

HIGH

Availability impact

HIGH

local

low complexity

adobe

CWE-416

NVD

Published: 2024-08-14

Updated: 2024-08-20

Summary

Acrobat Reader versions 20.005.30636, 24.002.20965, 24.002.20964, 24.001.30123 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Vulnerable Configurations

Part	Description	Count
Application	Adobe Adobe Acrobat 20.001.3005 Adobe Acrobat 20.001.30005 Adobe Acrobat 20.001.30010 Adobe Acrobat 20.001.30018 Adobe Acrobat 20.001.30020 Adobe Acrobat 20.001.30025 Adobe Acrobat 20.004.30006 Adobe Acrobat 20.004.30015 Adobe Acrobat 20.005.30311 Adobe Acrobat 20.005.30314 Adobe Acrobat 20.005.30331 Adobe Acrobat 20.005.30334 Adobe Acrobat 20.005.30362 Adobe Acrobat 20.005.30381 Adobe Acrobat 20.005.30407 Adobe Acrobat 20.005.30436 Adobe Acrobat 20.005.30441 Adobe Acrobat 20.005.30467 Adobe Acrobat 20.005.30524 Adobe Acrobat 20.005.30635 Adobe Acrobat 20.005.30636 Adobe Acrobat 24.001.20604 Adobe Acrobat 24.001.20615 Adobe Acrobat 24.001.20643 Adobe Acrobat DC 24.002.20964 Adobe Acrobat DC 24.002.20991 Adobe Acrobat Reader 20.001.3005 Adobe Acrobat Reader 20.001.30005 Adobe Acrobat Reader 20.001.30010 Adobe Acrobat Reader 20.001.30018 Adobe Acrobat Reader 20.001.30020 Adobe Acrobat Reader 20.001.30025 Adobe Acrobat Reader 20.001.300183 Adobe Acrobat Reader 20.004.30005 Adobe Acrobat Reader 20.004.30006 Adobe Acrobat Reader 20.004.30015 Adobe Acrobat Reader 20.005.30311 Adobe Acrobat Reader 20.005.30314 Adobe Acrobat Reader 20.005.30331 Adobe Acrobat Reader 20.005.30334 Adobe Acrobat Reader 20.005.30362 Adobe Acrobat Reader 20.005.30381 Adobe Acrobat Reader 20.005.30407 Adobe Acrobat Reader 20.005.30436 Adobe Acrobat Reader 20.005.30441 Adobe Acrobat Reader 20.005.30467 Adobe Acrobat Reader 20.005.30524 Adobe Acrobat Reader 20.005.30635 Adobe Acrobat Reader 20.005.30636 Adobe Acrobat Reader DC 24.002.20964 Adobe Acrobat Reader DC 24.002.20991	51
OS	Apple Apple Macos -	1
OS	Microsoft Microsoft Windows -	1

Common Weakness Enumeration (CWE)

CWE-416 - Use After Free

References

https://helpx.adobe.com/security/products/acrobat/apsb24-57.html

Summary

Vulnerable Configurations

Common Weakness Enumeration (CWE)

Related news

References