CVE-2023-21612 is a privilege escalation vulnerability in Adobe Acrobat Reader versions 22.003.20282 (and earlier), 22.003.20281 (and earlier), and 20.005.30418 (and earlier) across Adobe, Apple, and Microsoft platforms. Rated 7.8 HIGH, it stems from the creation of temporary files with incorrect permissions, requiring user interaction to open a malicious file for exploitation. While no active exploits, Metasploit modules, or ExploitDB entries exist, there has been some community discussion on Reddit regarding Adobe Reader exploits. This vulnerability is not currently on the CISA KEV catalog or Hot List.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
>= 15.008.20082, <= 22.003.20282CPE matchmatch criteria | cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:* | ||
>= 15.008.20082, <= 22.003.20282CPE matchmatch criteria | cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:* | ||
>= 15.008.20082, <= 22.003.20281CPE matchmatch criteria | cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:* | ||
>= 15.008.20082, <= 22.003.20281CPE matchmatch criteria | cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:* | ||
>= 20.001.30005, <= 20.005.30418CPE matchmatch criteria | cpe:2.3:a:adobe:acrobat:*:*:*:*:classic:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.2 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.