Vulnerabilities > CVE-2024-49535 - XXE vulnerability in Adobe products

CVSS 7.8 - HIGH

Attack vector

LOCAL

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

HIGH

Integrity impact

HIGH

Availability impact

HIGH

local

low complexity

adobe

CWE-611

NVD

Published: 2024-12-10

Updated: 2024-12-18

Summary

Acrobat Reader versions 24.005.20307, 24.001.30213, 24.001.30193, 20.005.30730, 20.005.30710 and earlier are affected by an Improper Restriction of XML External Entity Reference ('XXE') vulnerability that could result in arbitrary code execution. This vulnerability allows an attacker to provide malicious XML input containing a reference to an external entity, leading to data disclosure or potentially code execution. Exploitation of this issue requires user interaction in that a victim must process a malicious XML document.

Vulnerable Configurations

Part	Description	Count
Application	Adobe Adobe Acrobat 20.001.30002 Adobe Acrobat 20.001.30005 Adobe Acrobat 20.001.30010 Adobe Acrobat 20.001.30018 Adobe Acrobat 20.001.30020 Adobe Acrobat 20.001.30025 Adobe Acrobat 20.004.30005 Adobe Acrobat 20.004.30006 Adobe Acrobat 20.004.30015 Adobe Acrobat 20.004.30017 Adobe Acrobat 20.004.30020 Adobe Acrobat 20.005.30311 Adobe Acrobat 20.005.30314 Adobe Acrobat 20.005.30331 Adobe Acrobat 20.005.30334 Adobe Acrobat 20.005.30362 Adobe Acrobat 20.005.30381 Adobe Acrobat 20.005.30407 Adobe Acrobat 20.005.30418 Adobe Acrobat 20.005.30436 Adobe Acrobat 20.005.30441 Adobe Acrobat 20.005.30467 Adobe Acrobat 20.005.30514 Adobe Acrobat 20.005.30516 Adobe Acrobat 20.005.30524 Adobe Acrobat 20.005.30539 Adobe Acrobat 20.005.30574 Adobe Acrobat 20.005.30635 Adobe Acrobat 20.005.30636 Adobe Acrobat 20.005.30655 Adobe Acrobat 20.005.30680 Adobe Acrobat 20.005.30710 Adobe Acrobat 20.005.30730 Adobe Acrobat 24.001.20604 Adobe Acrobat 24.001.20615 Adobe Acrobat 24.001.20643 Adobe Acrobat 24.001.30159 Adobe Acrobat DC 15.000.0000 Adobe Acrobat DC 15.007.20033 Adobe Acrobat DC 15.008.20082 Adobe Acrobat DC 15.009.20069 Adobe Acrobat DC 15.009.20071 Adobe Acrobat DC 15.009.20077 Adobe Acrobat DC 15.009.20079 Adobe Acrobat DC 15.010.20056 Adobe Acrobat DC 15.010.20059 Adobe Acrobat DC 15.010.20060 Adobe Acrobat DC 15.016.20039 Adobe Acrobat DC 15.016.20041 Adobe Acrobat DC 15.016.20045 Adobe Acrobat DC 15.017.20050 Adobe Acrobat DC 15.017.20053 Adobe Acrobat DC 15.020.20039 Adobe Acrobat DC 15.020.20042 Adobe Acrobat DC 15.023.20053 Adobe Acrobat DC 15.023.20056 Adobe Acrobat DC 15.023.20070 Adobe Acrobat DC 17.000.0000 Adobe Acrobat DC 17.009.20044 Adobe Acrobat DC 17.009.20058 Adobe Acrobat DC 17.012.20093 Adobe Acrobat DC 17.012.20095 Adobe Acrobat DC 17.012.20096 Adobe Acrobat DC 17.012.20098 Adobe Acrobat DC 18.0 Adobe Acrobat DC 18.009.20044 Adobe Acrobat DC 18.009.20050 Adobe Acrobat DC 18.011.20035 Adobe Acrobat DC 18.011.20036 Adobe Acrobat DC 18.011.20038 Adobe Acrobat DC 18.011.20040 Adobe Acrobat DC 18.011.20055 Adobe Acrobat DC 18.011.20058 Adobe Acrobat DC 18.011.20063 Adobe Acrobat DC 19.008.20071 Adobe Acrobat DC 19.008.20074 Adobe Acrobat DC 19.008.20080 Adobe Acrobat DC 19.008.20081 Adobe Acrobat DC 19.010.20064 Adobe Acrobat DC 19.010.20069 Adobe Acrobat DC 19.010.20091 Adobe Acrobat DC 19.010.20098 Adobe Acrobat DC 19.010.20099 Adobe Acrobat DC 19.010.20100 Adobe Acrobat DC 19.012.20034 Adobe Acrobat DC 19.012.20035 Adobe Acrobat DC 19.012.20036 Adobe Acrobat DC 19.012.20040 Adobe Acrobat DC 19.021.20047 Adobe Acrobat DC 19.021.20048 Adobe Acrobat DC 19.021.20049 Adobe Acrobat DC 19.021.20056 Adobe Acrobat DC 19.021.20058 Adobe Acrobat DC 19.021.20061 Adobe Acrobat DC 20.006.20034 Adobe Acrobat DC 20.006.20042 Adobe Acrobat DC 20.009.20063 Adobe Acrobat DC 20.009.20065 Adobe Acrobat DC 20.009.20067 Adobe Acrobat DC 20.009.20074 Adobe Acrobat DC 20.012.20041 Adobe Acrobat DC 20.012.20043 Adobe Acrobat DC 20.012.20048 Adobe Acrobat DC 20.013.20064 Adobe Acrobat DC 20.013.20066 Adobe Acrobat DC 20.013.20074 Adobe Acrobat DC 21.001.20135 Adobe Acrobat DC 21.001.20138 Adobe Acrobat DC 21.001.20140 Adobe Acrobat DC 21.001.20142 Adobe Acrobat DC 21.001.20145 Adobe Acrobat DC 21.001.20149 Adobe Acrobat DC 21.001.20150 Adobe Acrobat DC 21.001.20155 Adobe Acrobat DC 21.005.20048 Adobe Acrobat DC 21.005.20054 Adobe Acrobat DC 21.005.20058 Adobe Acrobat DC 21.005.20060 Adobe Acrobat DC 21.007.20091 Adobe Acrobat DC 21.007.20095 Adobe Acrobat DC 21.007.20096 Adobe Acrobat DC 21.007.20099 Adobe Acrobat DC 21.011.20039 Adobe Acrobat DC 22.001.20085 Adobe Acrobat DC 22.001.20112 Adobe Acrobat DC 22.001.20117 Adobe Acrobat DC 22.001.20142 Adobe Acrobat DC 22.001.20169 Adobe Acrobat DC 22.002.20191 Adobe Acrobat DC 22.002.20212 Adobe Acrobat DC 22.003.20258 Adobe Acrobat DC 22.003.20263 Adobe Acrobat DC 22.003.20281 Adobe Acrobat DC 22.003.20282 Adobe Acrobat DC 22.003.20310 Adobe Acrobat DC 22.003.20314 Adobe Acrobat DC 22.003.20322 Adobe Acrobat DC 23.001.20063 Adobe Acrobat DC 23.001.20064 Adobe Acrobat DC 23.001.20093 Adobe Acrobat DC 23.001.20143 Adobe Acrobat DC 23.001.20174 Adobe Acrobat DC 23.001.20177 Adobe Acrobat DC 23.003.20201 Adobe Acrobat DC 23.003.20215 Adobe Acrobat DC 23.003.20244 Adobe Acrobat DC 23.003.20269 Adobe Acrobat DC 23.003.20284 Adobe Acrobat DC 23.006.20320 Adobe Acrobat DC 23.006.20360 Adobe Acrobat DC 23.006.20380 Adobe Acrobat DC 23.008.20421 Adobe Acrobat DC 23.008.20423 Adobe Acrobat DC 23.008.20458 Adobe Acrobat DC 23.008.20470 Adobe Acrobat DC 23.008.20533 Adobe Acrobat DC 23.008.20555 Adobe Acrobat DC 24.001.20604 Adobe Acrobat DC 24.001.20615 Adobe Acrobat DC 24.001.20629 Adobe Acrobat DC 24.001.20631 Adobe Acrobat DC 24.001.20643 Adobe Acrobat DC 24.002.20687 Adobe Acrobat DC 24.002.20736 Adobe Acrobat DC 24.002.20759 Adobe Acrobat DC 24.002.20854 Adobe Acrobat DC 24.002.20857 Adobe Acrobat DC 24.002.20893 Adobe Acrobat DC 24.002.20895 Adobe Acrobat DC 24.002.20933 Adobe Acrobat DC 24.002.20964 Adobe Acrobat DC 24.002.20965 Adobe Acrobat DC 24.002.20991 Adobe Acrobat DC 24.002.21005 Adobe Acrobat DC 24.003.20054 Adobe Acrobat DC 24.003.20112 Adobe Acrobat DC 24.003.20121 Adobe Acrobat DC 24.003.20180 Adobe Acrobat DC 24.004.20219 Adobe Acrobat DC 24.004.20220 Adobe Acrobat DC 24.004.20243 Adobe Acrobat DC 24.004.20272 Adobe Acrobat Reader 20.001.30002 Adobe Acrobat Reader 20.001.30005 Adobe Acrobat Reader 20.001.30010 Adobe Acrobat Reader 20.001.30018 Adobe Acrobat Reader 20.001.30020 Adobe Acrobat Reader 20.001.30025 Adobe Acrobat Reader 20.001.300183 Adobe Acrobat Reader 20.004.30005 Adobe Acrobat Reader 20.004.30006 Adobe Acrobat Reader 20.004.30015 Adobe Acrobat Reader 20.004.30017 Adobe Acrobat Reader 20.004.30020 Adobe Acrobat Reader 20.005.30311 Adobe Acrobat Reader 20.005.30314 Adobe Acrobat Reader 20.005.30331 Adobe Acrobat Reader 20.005.30334 Adobe Acrobat Reader 20.005.30362 Adobe Acrobat Reader 20.005.30381 Adobe Acrobat Reader 20.005.30407 Adobe Acrobat Reader 20.005.30418 Adobe Acrobat Reader 20.005.30436 Adobe Acrobat Reader 20.005.30441 Adobe Acrobat Reader 20.005.30467 Adobe Acrobat Reader 20.005.30514 Adobe Acrobat Reader 20.005.30516 Adobe Acrobat Reader 20.005.30524 Adobe Acrobat Reader 20.005.30539 Adobe Acrobat Reader 20.005.30574 Adobe Acrobat Reader 20.005.30635 Adobe Acrobat Reader 20.005.30636 Adobe Acrobat Reader 20.005.30655 Adobe Acrobat Reader 20.005.30680 Adobe Acrobat Reader 20.005.30710 Adobe Acrobat Reader 20.005.30730 Adobe Acrobat Reader DC 15.000.0000 Adobe Acrobat Reader DC 15.007.20033 Adobe Acrobat Reader DC 15.008.20082 Adobe Acrobat Reader DC 15.009.20069 Adobe Acrobat Reader DC 15.009.20071 Adobe Acrobat Reader DC 15.009.20077 Adobe Acrobat Reader DC 15.009.20079 Adobe Acrobat Reader DC 15.010.20056 Adobe Acrobat Reader DC 15.010.20059 Adobe Acrobat Reader DC 15.010.20060 Adobe Acrobat Reader DC 15.016.20039 Adobe Acrobat Reader DC 15.016.20041 Adobe Acrobat Reader DC 15.016.20045 Adobe Acrobat Reader DC 15.017.20050 Adobe Acrobat Reader DC 15.017.20053 Adobe Acrobat Reader DC 15.020.20039 Adobe Acrobat Reader DC 15.020.20042 Adobe Acrobat Reader DC 15.023.20053 Adobe Acrobat Reader DC 15.023.20056 Adobe Acrobat Reader DC 15.023.20070 Adobe Acrobat Reader DC 17.000.0000 Adobe Acrobat Reader DC 17.009.20044 Adobe Acrobat Reader DC 17.009.20058 Adobe Acrobat Reader DC 17.012.20093 Adobe Acrobat Reader DC 17.012.20095 Adobe Acrobat Reader DC 17.012.20098 Adobe Acrobat Reader DC 18.0 Adobe Acrobat Reader DC 18.009.20044 Adobe Acrobat Reader DC 18.009.20050 Adobe Acrobat Reader DC 18.011.20035 Adobe Acrobat Reader DC 18.011.20036 Adobe Acrobat Reader DC 18.011.20038 Adobe Acrobat Reader DC 18.011.20040 Adobe Acrobat Reader DC 18.011.20055 Adobe Acrobat Reader DC 18.011.20058 Adobe Acrobat Reader DC 18.011.20063 Adobe Acrobat Reader DC 19.008.20071 Adobe Acrobat Reader DC 19.008.20074 Adobe Acrobat Reader DC 19.008.20080 Adobe Acrobat Reader DC 19.008.20081 Adobe Acrobat Reader DC 19.010.20064 Adobe Acrobat Reader DC 19.010.20069 Adobe Acrobat Reader DC 19.010.20091 Adobe Acrobat Reader DC 19.010.20098 Adobe Acrobat Reader DC 19.010.20099 Adobe Acrobat Reader DC 19.010.20100 Adobe Acrobat Reader DC 19.012.20034 Adobe Acrobat Reader DC 19.012.20035 Adobe Acrobat Reader DC 19.012.20036 Adobe Acrobat Reader DC 19.012.20040 Adobe Acrobat Reader DC 19.021.20047 Adobe Acrobat Reader DC 19.021.20048 Adobe Acrobat Reader DC 19.021.20049 Adobe Acrobat Reader DC 19.021.20056 Adobe Acrobat Reader DC 19.021.20058 Adobe Acrobat Reader DC 19.021.20061 Adobe Acrobat Reader DC 20.006.20034 Adobe Acrobat Reader DC 20.006.20042 Adobe Acrobat Reader DC 20.009.20063 Adobe Acrobat Reader DC 20.009.20065 Adobe Acrobat Reader DC 20.009.20067 Adobe Acrobat Reader DC 20.009.20074 Adobe Acrobat Reader DC 20.012.20041 Adobe Acrobat Reader DC 20.012.20043 Adobe Acrobat Reader DC 20.012.20048 Adobe Acrobat Reader DC 20.013.20064 Adobe Acrobat Reader DC 20.013.20066 Adobe Acrobat Reader DC 20.013.20074 Adobe Acrobat Reader DC 21.001.20135 Adobe Acrobat Reader DC 21.001.20138 Adobe Acrobat Reader DC 21.001.20140 Adobe Acrobat Reader DC 21.001.20142 Adobe Acrobat Reader DC 21.001.20145 Adobe Acrobat Reader DC 21.001.20149 Adobe Acrobat Reader DC 21.001.20150 Adobe Acrobat Reader DC 21.001.20155 Adobe Acrobat Reader DC 21.005.20048 Adobe Acrobat Reader DC 21.005.20054 Adobe Acrobat Reader DC 21.005.20058 Adobe Acrobat Reader DC 21.005.20060 Adobe Acrobat Reader DC 21.007.20091 Adobe Acrobat Reader DC 21.007.20095 Adobe Acrobat Reader DC 21.007.20096 Adobe Acrobat Reader DC 21.007.20099 Adobe Acrobat Reader DC 21.011.20039 Adobe Acrobat Reader DC 22.001.20085 Adobe Acrobat Reader DC 22.001.20112 Adobe Acrobat Reader DC 22.001.20117 Adobe Acrobat Reader DC 22.001.20142 Adobe Acrobat Reader DC 22.001.20169 Adobe Acrobat Reader DC 22.002.20191 Adobe Acrobat Reader DC 22.002.20212 Adobe Acrobat Reader DC 22.003.20258 Adobe Acrobat Reader DC 22.003.20263 Adobe Acrobat Reader DC 22.003.20281 Adobe Acrobat Reader DC 22.003.20282 Adobe Acrobat Reader DC 22.003.20310 Adobe Acrobat Reader DC 22.003.20314 Adobe Acrobat Reader DC 22.003.20322 Adobe Acrobat Reader DC 23.001.20063 Adobe Acrobat Reader DC 23.001.20064 Adobe Acrobat Reader DC 23.001.20093 Adobe Acrobat Reader DC 23.001.20143 Adobe Acrobat Reader DC 23.001.20174 Adobe Acrobat Reader DC 23.001.20177 Adobe Acrobat Reader DC 23.003.20201 Adobe Acrobat Reader DC 23.003.20215 Adobe Acrobat Reader DC 23.003.20244 Adobe Acrobat Reader DC 23.003.20269 Adobe Acrobat Reader DC 23.003.20284 Adobe Acrobat Reader DC 23.006.20320 Adobe Acrobat Reader DC 23.006.20360 Adobe Acrobat Reader DC 23.006.20380 Adobe Acrobat Reader DC 23.008.20421 Adobe Acrobat Reader DC 23.008.20423 Adobe Acrobat Reader DC 23.008.20458 Adobe Acrobat Reader DC 23.008.20470 Adobe Acrobat Reader DC 23.008.20533 Adobe Acrobat Reader DC 23.008.20555 Adobe Acrobat Reader DC 24.001.20604 Adobe Acrobat Reader DC 24.001.20615 Adobe Acrobat Reader DC 24.001.20629 Adobe Acrobat Reader DC 24.001.20631 Adobe Acrobat Reader DC 24.001.20643 Adobe Acrobat Reader DC 24.002.20687 Adobe Acrobat Reader DC 24.002.20736 Adobe Acrobat Reader DC 24.002.20759 Adobe Acrobat Reader DC 24.002.20854 Adobe Acrobat Reader DC 24.002.20857 Adobe Acrobat Reader DC 24.002.20893 Adobe Acrobat Reader DC 24.002.20895 Adobe Acrobat Reader DC 24.002.20933 Adobe Acrobat Reader DC 24.002.20964 Adobe Acrobat Reader DC 24.002.20965 Adobe Acrobat Reader DC 24.002.20991 Adobe Acrobat Reader DC 24.002.21005 Adobe Acrobat Reader DC 24.003.20054 Adobe Acrobat Reader DC 24.003.20112 Adobe Acrobat Reader DC 24.003.20121 Adobe Acrobat Reader DC 24.003.20180 Adobe Acrobat Reader DC 24.004.20219 Adobe Acrobat Reader DC 24.004.20220 Adobe Acrobat Reader DC 24.004.20243 Adobe Acrobat Reader DC 24.004.20272	360
OS	Apple Apple Macos -	1
OS	Microsoft Microsoft Windows -	1

Common Weakness Enumeration (CWE)

CWE-611 - Improper Restriction of XML External Entity Reference ('XXE')

References

https://helpx.adobe.com/security/products/acrobat/apsb24-92.html