CVE-2023-21586

Summary

CVE-2023-21586 is a NULL Pointer Dereference vulnerability affecting Adobe Acrobat Reader versions 22.003.20282 and earlier, 22.003.20281 and earlier, and 20.005.30418 and earlier. This issue allows an unauthenticated attacker to cause an application denial-of-service by manipulating a malicious file. User interaction is required for successful exploitation, meaning the victim must open the compromised file for the vulnerability to be triggered. These versions of Adobe Acrobat Reader are urged to be updated to mitigate the risk of this vulnerability.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.