CVE-2024-20747
CVSS 3.1 Score 5.5 of 10 (medium)
Details
Summary
CVE-2024-20747 is a vulnerability affecting Acrobat Reader versions 20.005.30539, 23.008.20470, and earlier. This vulnerability allows for an out-of-bounds read, potentially leading to the disclosure of sensitive memory. It can be exploited by an attacker to bypass mitigations such as ASLR, but user interaction is required in the form of opening a malicious file. The vulnerability has a base severity rating of MEDIUM and a base score of 5.5 according to the CVSS:3.1 scoring system. It poses a high risk to organizations as it can result in the unauthorized access of sensitive information stored within Acrobat Reader. Adobe has not provided any specific remediation steps or patches for this vulnerability at this time.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Advisories, Assessments, and Mitigations
Prioritize, Pinpoint, and Act to Prevent Vulnerability Exploits with Recorded Future
- Gain complete coverage of your cyber, third party, and physical attack surface
- Proactively mitigate threats before they turn into costly attacks
- Make fast, effective, data-driven decisions