CVE-2023-29299

Summary

CVE-2023-29299 is a newly disclosed vulnerability affecting Adobe Acrobat Reader versions 23.003.20244 and earlier, as well as 20.005.30467 and earlier. This issue is classified as an Untrusted Search Path vulnerability, which can result in Application denial-of-service. An attacker could potentially exploit this flaw if the default PowerShell Set-ExecutionPolicy is set to Unrestricted, leading to a high attack complexity. Notably, exploitation of this vulnerability necessitates user interaction, as a victim must open a maliciously crafted file for the attack to be successful.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.