NIST AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N

NIST AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Acrobat Reader versions 24.005.20307, 24.001.30213, 24.001.30193, 20.005.30730, 20.005.30710 and earlier are affected by an Improper Restriction of XML External Entity Reference ('XXE') vulnerability that allows an attacker to provide malicious XML input containing a reference to an external entity, leading to unauthorized read access to the file system. Exploitation of this issue requires user interaction in that a victim must process a malicious XML document.

Acrobat Reader versions 24.005.20307, 24.001.30213, 24.001.30193, 20.005.30730, 20.005.30710 and earlier are affected by an Improper Restriction of XML External Entity Reference ('XXE') vulnerability that allows an attacker to provide malicious XML input containing a reference to an external entity, potentially leading to unauthorized read access outside the Acrobat sandbox. Exploitation of this issue requires user interaction in that a victim must process a malicious XML document.

NIST AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

NIST AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Acrobat Reader versions 24.005.20307, 24.001.30213, 24.001.30193, 20.005.30730, 20.005.30710 and earlier are affected by an Improper Restriction of XML External Entity Reference ('XXE') vulnerability that could result in arbitrary code execution. This vulnerability allows an attacker to provide malicious XML input containing a reference to an external entity, leading to data disclosure or potentially code execution. Exploitation of this issue requires user interaction in that a victim must proce

Acrobat Reader versions 24.005.20307, 24.001.30213, 24.001.30193, 20.005.30730, 20.005.30710 and earlier are affected by an Improper Restriction of XML External Entity Reference ('XXE') vulnerability that allows an attacker to provide malicious XML input containing a reference to an external entity, leading to unauthorized read access to the file system. Exploitation of this issue requires user interaction in that a victim must process a malicious XML document.

NIST AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

AND
     OR
          *cpe:2.3:a:adobe:acrobat:*:*:*:*:classic:*:*:* versions from (including) 20.001.30002 up to (excluding) 20.005.30748
          *cpe:2.3:a:adobe:acrobat:*:*:*:*:classic:*:*:* versions from (including) 24.0.0 up to (excluding) 24.001.30225
          *cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:* versions up to (excluding) 24.005.20320
          *cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:classic:*:*:* versions from (including) 20.001.30002 up to (excluding) 20.005.30748
   

https://helpx.adobe.com/security/products/acrobat/apsb24-92.html No Types Assigned

https://helpx.adobe.com/security/products/acrobat/apsb24-92.html Vendor Advisory

Acrobat Reader versions 24.005.20307, 24.001.30213, 24.001.30193, 20.005.30730, 20.005.30710 and earlier are affected by an Improper Restriction of XML External Entity Reference ('XXE') vulnerability that could result in arbitrary code execution. This vulnerability allows an attacker to provide malicious XML input containing a reference to an external entity, leading to data disclosure or potentially code execution. Exploitation of this issue requires user interaction in that a victim must proce

AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N

CWE-611

https://helpx.adobe.com/security/products/acrobat/apsb24-92.html