PT-2023-6412 · Adobe · Acrobat+3

Published

2023-04-11

·

Updated

2023-10-11

·

CVE-2023-26396

CVSS v3.1

7.8

High

VectorAV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Adobe Acrobat versions prior to 23.001.20093 Adobe Acrobat Reader versions prior to 23.001.20093 Adobe Acrobat versions prior to 20.005.30441 Adobe Acrobat Reader versions prior to 20.005.30441 Adobe Acrobat 2020 (affected versions not specified) Adobe Acrobat Reader 2020 (affected versions not specified) Adobe Acrobat Document Cloud (affected versions not specified) Adobe Acrobat Reader Document Cloud (affected versions not specified)
Description The issue is related to the creation of temporary files in a directory with incorrect permissions, which could result in privilege escalation in the context of the current user. Exploitation of this issue requires user interaction, such as opening a malicious file. This allows an attacker to potentially escalate privileges using a specially crafted file.
Recommendations For Adobe Acrobat versions prior to 23.001.20093, update to a version later than 23.001.20093. For Adobe Acrobat Reader versions prior to 23.001.20093, update to a version later than 23.001.20093. For Adobe Acrobat versions prior to 20.005.30441, update to a version later than 20.005.30441. For Adobe Acrobat Reader versions prior to 20.005.30441, update to a version later than 20.005.30441. For Adobe Acrobat 2020, Adobe Acrobat Reader 2020, Adobe Acrobat Document Cloud, and Adobe Acrobat Reader Document Cloud, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-379

Related Identifiers

BDU:2023-07128
CVE-2023-26396

Affected Products

Acrobat
Acrobat Document Cloud
Acrobat Reader
Adobe Acrobat Reader Document Cloud