Adobe Acrobat Reader versions 23.006.20360 (and earlier) and 20.005.30524 (and earlier) are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

The version of Adobe Reader installed on the remote macOS host is a version prior to 20.005.30539 or 23.006.20380. It is, therefore, affected by multiple vulnerabilities.

  - Use After Free (CWE-416) potentially leading to Arbitrary code execution (CVE-2023-44336, CVE-2023-44359,     CVE-2023-44367, CVE-2023-44371, CVE-2023-44372)

  - Out-of-bounds Read (CWE-125) potentially leading to Arbitrary code execution (CVE-2023-44337,     CVE-2023-44338)

  - Access of Uninitialized Pointer (CWE-824) potentially leading to Arbitrary code execution (CVE-2023-44365)

  - Out-of-bounds Write (CWE-787) potentially leading to Arbitrary code execution (CVE-2023-44366)

  - Out-of-bounds Read (CWE-125) potentially leading to Memory leak (CVE-2023-44339, CVE-2023-44340,     CVE-2023-44348, CVE-2023-44356, CVE-2023-44357, CVE-2023-44358, CVE-2023-44360)

  - Use After Free (CWE-416) potentially leading to Memory leak (CVE-2023-44361)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Adobe Reader installed on the remote Windows host is a version prior to 20.005.30539 or 23.006.20380. It is, therefore, affected by multiple vulnerabilities.

  - Use After Free (CWE-416) potentially leading to Arbitrary code execution (CVE-2023-44336, CVE-2023-44359,     CVE-2023-44367, CVE-2023-44371, CVE-2023-44372)

  - Out-of-bounds Read (CWE-125) potentially leading to Arbitrary code execution (CVE-2023-44337,     CVE-2023-44338)

  - Access of Uninitialized Pointer (CWE-824) potentially leading to Arbitrary code execution (CVE-2023-44365)

  - Out-of-bounds Write (CWE-787) potentially leading to Arbitrary code execution (CVE-2023-44366)

  - Out-of-bounds Read (CWE-125) potentially leading to Memory leak (CVE-2023-44339, CVE-2023-44340,     CVE-2023-44348, CVE-2023-44356, CVE-2023-44357, CVE-2023-44358, CVE-2023-44360)

  - Use After Free (CWE-416) potentially leading to Memory leak (CVE-2023-44361)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Adobe Acrobat installed on the remote Windows host is a version prior to 20.005.30539 or 23.006.20380. It is, therefore, affected by multiple vulnerabilities.

  - Use After Free (CWE-416) potentially leading to Arbitrary code execution (CVE-2023-44336, CVE-2023-44359,     CVE-2023-44367, CVE-2023-44371, CVE-2023-44372)

  - Out-of-bounds Read (CWE-125) potentially leading to Arbitrary code execution (CVE-2023-44337,     CVE-2023-44338)

  - Access of Uninitialized Pointer (CWE-824) potentially leading to Arbitrary code execution (CVE-2023-44365)

  - Out-of-bounds Write (CWE-787) potentially leading to Arbitrary code execution (CVE-2023-44366)

  - Out-of-bounds Read (CWE-125) potentially leading to Memory leak (CVE-2023-44339, CVE-2023-44340,     CVE-2023-44348, CVE-2023-44356, CVE-2023-44357, CVE-2023-44358, CVE-2023-44360)

  - Use After Free (CWE-416) potentially leading to Memory leak (CVE-2023-44361)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Adobe Acrobat installed on the remote macOS host is a version prior to 20.005.30539 or 23.006.20380. It is, therefore, affected by multiple vulnerabilities.

  - Use After Free (CWE-416) potentially leading to Arbitrary code execution (CVE-2023-44336, CVE-2023-44359,     CVE-2023-44367, CVE-2023-44371, CVE-2023-44372)

  - Out-of-bounds Read (CWE-125) potentially leading to Arbitrary code execution (CVE-2023-44337,     CVE-2023-44338)

  - Access of Uninitialized Pointer (CWE-824) potentially leading to Arbitrary code execution (CVE-2023-44365)

  - Out-of-bounds Write (CWE-787) potentially leading to Arbitrary code execution (CVE-2023-44366)

  - Out-of-bounds Read (CWE-125) potentially leading to Memory leak (CVE-2023-44339, CVE-2023-44340,     CVE-2023-44348, CVE-2023-44356, CVE-2023-44357, CVE-2023-44358, CVE-2023-44360)

  - Use After Free (CWE-416) potentially leading to Memory leak (CVE-2023-44361)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
185554	Adobe Reader < 20.005.30539 / 23.006.20380 Multiple Vulnerabilities (APSB23-54) (macOS)	Nessus	MacOS X Local Security Checks	high
185553	Adobe Reader < 20.005.30539 / 23.006.20380 Multiple Vulnerabilities (APSB23-54)	Nessus	Windows	high
185552	Adobe Acrobat < 20.005.30539 / 23.006.20380 Multiple Vulnerabilities (APSB23-54)	Nessus	Windows	high
185551	Adobe Acrobat < 20.005.30539 / 23.006.20380 Multiple Vulnerabilities (APSB23-54) (macOS)	Nessus	MacOS X Local Security Checks	high

Detections

Analytics

CVE-2023-44371

high

Tenable Plugins

high

high

high

high