Adobe Acrobat and Reader Vulnerability Exposes Users to Arbitrary Code Execution

What changed

A newly identified vulnerability in Adobe Acrobat and Reader has been disclosed, specifically affecting versions 24.001.30356, 26.001.21367, and earlier. This vulnerability is categorized as an Improperly Controlled Modification of Object Prototype Attributes, commonly referred to as 'Prototype Pollution'.

If exploited, this flaw could enable an attacker to execute arbitrary code within the context of the current user, posing significant security risks.

Who is affected

The vulnerability impacts a range of users and organizations utilizing Adobe Acrobat and Reader software. The following groups are particularly at risk:

Users of Adobe Acrobat DC and Reader versions mentioned above should be aware of this vulnerability and take necessary precautions.

• Adobe Acrobat DC users on versions 24.001.30356 and 26.001.21367.
• Organizations relying on Adobe Reader for document management.
• Individuals who frequently open files from untrusted sources.

What to do

To mitigate the risks associated with this vulnerability, users should take immediate action. It is crucial to remain vigilant and follow best practices for software security.

Users are advised to update their Adobe Acrobat and Reader applications to the latest versions as soon as possible.

• Check for updates and install the latest version of Adobe Acrobat and Reader.
• Avoid opening files from unknown or untrusted sources until the software is updated.
• Consider implementing additional security measures, such as file scanning and user education on phishing attacks.