EXPOSURES › CVE-2023-26369
CVE-2023-26369
HIGH ⌖ ON CISA KEV · EXPLOITEDAdobe Acrobat and Reader out-of-bounds write vulnerability allows code execution.
Adobe Acrobat and Reader contains an out-of-bounds write vulnerability that allows for code execution, posing a significant risk to users. This vulnerability, actively exploited, highlights Adobe's ongoing security challenges and the need for constant vigilance and remediation efforts.
Shame score — Repetitive critical Remote Code Execution (RCE) vulnerabilities in Acrobat and Reader products, indicating a lack of adequate security measures and a high-risk track record.
▸ RECOMMENDED ACTION Actively exploited (CISA KEV) — remediate now, ahead of your normal patch cycle.
Adobe Acrobat and Reader contains an out-of-bounds write vulnerability that allows for code execution.
| PRODUCT | STATUS |
|---|---|
| Adobe Acrobat Sign for Government Adobe |
Authorized |
| Adobe Analytics Adobe |
Authorized |
| Adobe Campaign Adobe |
Authorized |
| Adobe Connect Managed Services (ACMS-GC) Adobe |
Authorized |
| Adobe Creative Cloud for Enterprise Adobe |
Authorized |
| Adobe Document Cloud (PDF Services & Adobe Sign) Adobe |
Authorized |
| Adobe Experience Manager Managed Services (AEMMS-GC) Adobe |
Authorized |
| Adobe Learning Manager Adobe |
Authorized |