Fixed Intel

CISA Known Exploited Vulnerability

This vulnerability is actively exploited in the wild and listed in the CISA Known Exploited Vulnerabilities catalog.

Remediation Deadline: Oct 31, 2023

CVE-2023-21608

High
EPSS 84.1%CISA KEV
Adobe/Acrobat and Reader

Description

Adobe Acrobat and Reader contains a use-after-free vulnerability that allows for code execution in the context of the current user.

EPSS — Exploit Probability

84.1%

Higher than 99.3% of all CVEs

Required Action

https://helpx.adobe.com/security/products/acrobat/apsb23-01.html; https://nvd.nist.gov/vuln/detail/CVE-2023-21608

Risk Assessment

HIGH
In CISA KEV
High EPSS

Details

Severity
High
EPSS
84.1%
CISA KEV
Yes
Ransomware
Unknown
Articles
0

Timeline

Published

Oct 10, 2023

Added to KEV

Oct 10, 2023

Remediation Due

Oct 31, 2023

Affected Product

Adobe

Acrobat and Reader

View all Adobe CVEs