Adobe Acrobat and Reader Remote Code Execution Vulnerability (CVE-2024-41869)

A new Remote Code Execution vulnerability (CVE-2024-41869) was discovered on some versions of Adobe Acrobat and Reader recently.  The vulnerability enables a remote attacker to achieve remote code execution. Users are urged to apply the latest patch immediately to mitigate any potential threats.

Vulnerability

• Remote Code Execution Vulnerability (CVE-2024-41869)

Severity Level

• High

Affected versions

• Acrobat DC: 24.003.20054 and earlier versions (Windows), 24.002.21005 and earlier versions (MacOS)
• Acrobat Reader DC: 24.003.20054 and earlier versions (Windows), 24.002.21005 and earlier versions (MacOS)
• Acrobat 2024: 24.001.30159 and earlier versions (Windows & MacOS)
• Acrobat 2020: 20.005.30655 and earlier versions (Windows & MacOS)
• Acrobat Reader 2020: 20.005.30655 and earlier versions (Windows & MacOS)

Remediation

• Update affected Adobe Acrobat and Reader version with the latest version ASAP.

Reference

• Adobe Security Bulletin
• NVD – CVE-2024-41869 (nist.gov)
• CVE-2024-41869 | Tenable
• Products and technical support periods (adobe.com)

Enquiry

• ITSC Service Desk: http://servicedesk.itsc.cuhk.edu.hk

Published on: 17 Sep 2024