Описание
Acrobat Reader versions 24.001.30365, 26.001.21651 and earlier are affected by an Uncontrolled Search Path Element vulnerability that could result in arbitrary code execution in the context of the current user. An attacker with high privileges could exploit this vulnerability to execute arbitrary code. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Scope is changed.
Ссылки
- Vendor Advisory
Уязвимые конфигурации
Одновременно
Одно из
Одно из
Одновременно
Одно из
EPSS
7.7 High
CVSS3
Дефекты
Связанные уязвимости
Acrobat Reader versions 24.001.30365, 26.001.21651 and earlier are affected by an Uncontrolled Search Path Element vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Scope is changed.
Уязвимость программ просмотра и редактирования PDF-файлов Adobe Acrobat, Adobe Acrobat Reader и Adobe Acrobat 2024, связанная с неконтролируемым элементом пути поиска, позволяющая нарушителю выполнить произвольный код
EPSS
7.7 High
CVSS3