CVE-2024-8816

Summary

CVE-2024-8816 is a new information disclosure vulnerability affecting PDF-XChange Editor. This issue arises from a flaw in the software's handling of U3D files, specifically a lack of validation for the existence of an object before performing operations on it. attackers can exploit this vulnerability by creating malicious U3D files or webpages, leading to sensitive information disclosure when the target interacts with the malicious content. While the vulnerability does not directly allow code execution, it could be combined with other vulnerabilities to achieve this outcome. This vulnerability was identified as ZDI-CAN-24211 in the Zero Day Initiative.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.