CVE-2023-38242

Summary

CVE-2023-38242 is a newly identified out-of-bounds read vulnerability affecting Adobe Acrobat Reader versions 23.003.20244 and earlier, as well as 20.005.30467 and earlier. This issue allows attackers to read sensitive memory content by manipulating the software's handling of specific file types. Successful exploitation necessitates user interaction, as victims must open a maliciously crafted file to be vulnerable. The consequences of this vulnerability go beyond just the disclosure of sensitive information, as it can also enable attackers to bypass mitigations like Address Space Layout Randomization (ASLR), making the impact more significant.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.