Cyber Security News

13 Security Flaws in Adobe Acrobat & Reader Allows Remote Code Execution

A critical security update for both Windows and macOS is available for Adobe Acrobat and Reader. 

Per Adobe, this update fixes serious vulnerabilities that could lead to arbitrary code execution, application denial-of-service, and memory leaks.

Document
Live Account Takeover Attack Simulation

How do Hackers Bypass 2FA?

Live attack simulation Webinar demonstrates various ways in which account takeover can happen and practices to protect your websites and APIs against ATO attacks .

Affected versions:

  • Acrobat DC – Continuous, versions 23.008.20470 and earlier
  • Acrobat Reader DC – Continuous, versions 23.008.20470 and earlier
  • Acrobat 2020 – Classic 2020, versions 20.005.30539 and earlier
  • Acrobat Reader 2020 – Classic 2020, versions 20.005.30539 and earlier

13 Security Flaws Adobe Acrobat & Reader:

High-Severity Vulnerabilities (Critical):

  • CVE-2024-20726, CVE-2024-20727, CVE-2024-20728, CVE-2024-20729, CVE-2024-20730, CVE-2024-20731

These vulnerabilities could allow attackers to execute arbitrary code on devices, potentially giving them complete control. Update immediately!

Moderate-Severity Vulnerabilities (Important):

  • CVE-2024-20733, CVE-2024-20734, CVE-2024-20735, CVE-2024-20736, CVE-2024-20747, CVE-2024-20748, CVE-2024-20749

These vulnerabilities could cause memory leaks or application crashes, potentially impacting performance or stability. While not as critical as the others, updating is still recommended.

Adobe urges users to update their Acrobat and Reader software to address critical vulnerabilities.

Adobe extends its sincere gratitude to Cisco Talos (ciscotalos), Trend Micro Zero Day Initiative, and Kai Lu (k3vinlusec) for reporting vulnerabilities and protecting Adobe users (CVE-2024-20728-20749).

Guru baran

Gurubaran is a co-founder of Cyber Security News and GBHackers On Security. He has 10+ years of experience as a Security Consultant, Editor, and Analyst in cybersecurity, technology, and communications.

Recent Posts

Norway Recommends Replacing SSLVPN/WebVPN to Stop Cyber Attacks

A very important message from the Norwegian National Cyber Security Centre (NCSC) says that Secure Socket Layer/Transport Layer Security (SSL/TLS)…

2 days ago

New Linux Backdoor Attacking Linux Users Via Installation Packages

Linux is widely used in numerous servers, cloud infrastructure, and Internet of Things devices, which makes it an attractive target…

2 days ago

ViperSoftX Malware Uses Deep Learning Model To Execute Commands

ViperSoftX malware, known for stealing cryptocurrency information, now leverages Tesseract, an open-source OCR engine, to target infected systems, which extracts…

2 days ago

Santander Data Breach: Hackers Accessed Company Database

Santander has confirmed that there was a major data breach that affected its workers and customers in Spain, Uruguay, and…

2 days ago

U.S. Govt Announces Rewards up to $5 Million for North Korean IT Workers

The U.S. government has offered a prize of up to $5 million for information that leads to the arrest and…

2 days ago

Russian APT Hackers Attacking Critical Infrastructure

Russia leverages a mix of state-backed Advanced Persistent Threat (APT) groups and financially motivated cybercriminals to achieve its strategic goals,…

2 days ago