CVE-2023-38245

Summary

CVE-2023-38245 is a newly disclosed Information Disclosure vulnerability affecting Adobe Acrobat Reader versions 23.003.20244 and earlier, as well as 20.005.30467 and earlier. This issue allows unauthenticated attackers to gain access to NTLMv2 credentials. Exploitation occurs when a user opens a specially crafted Microsoft Office file or visits a malicious webpage. The vulnerability can lead to potential security risks, as attackers can use obtained credentials for further unauthorized actions. It is recommended that users update their Adobe Acrobat Reader software to the latest version to mitigate this threat.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.