CVE-2023-38240

Summary

CVE-2023-38240 is a newly disclosed vulnerability affecting Adobe Acrobat Reader versions 23.003.20244 and earlier, as well as 20.005.30467 and earlier. This issue represents an out-of-bounds read vulnerability, whereby an attacker can manipulate data to access sensitive memory beyond its intended boundaries. The consequence of this action could result in the disclosure of protected information. Notably, this vulnerability allows bypassing of Address Space Layout Randomization (ASLR) mitigations, enhancing the potential impact of an exploit. Successful exploitation of this issue necessitates user interaction, requiring a victim to open a maliciously crafted file.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.