https://www.talosintelligence.com/vulnerability_reports/TALOS-2024-2011

Adobe Systems Incorporated AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

Adobe Systems Incorporated AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Acrobat Reader versions 20.005.30636, 24.002.20965, 24.002.20964, 24.001.30123 and earlier are affected by a Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability that could result in arbitrary code execution in the context of the current user. This issue occurs when the state of a resource changes between its check-time and use-time, allowing an attacker to manipulate the resource. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Acrobat Reader versions 20.005.30636, 24.002.21005, 24.001.30159, 20.005.30655, 24.002.20965, 24.002.20964, 24.001.30123, 24.003.20054 and earlier are affected by a Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability that could lead to arbitrary code execution. This vulnerability arises when the timing of actions changes the state of a resource between the checking of a condition and the use of the resource, allowing an attacker to manipulate the resource in a harmful way. Exploitati

Adobe Systems Incorporated https://helpx.adobe.com/security/products/acrobat/apsb24-70.html [No types assigned]

Adobe Systems Incorporated https://helpx.adobe.com/security/products/acrobat/apsb24-57.html

NIST AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

AND
     OR
          *cpe:2.3:a:adobe:acrobat:*:*:*:*:classic:*:*:* versions from (including) 20.001.30005 up to (excluding) 20.005.30655
          *cpe:2.3:a:adobe:acrobat:*:*:*:*:classic:*:*:* versions from (including) 24.001.20604 up to (excluding) 24.001.30159
          *cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:* versions from (including) 15.008.20082 up to (excluding) 24.002.21005
          *cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:classic:*:*:* versions from (including) 20.001.3005

https://helpx.adobe.com/security/products/acrobat/apsb24-57.html No Types Assigned

https://helpx.adobe.com/security/products/acrobat/apsb24-57.html Vendor Advisory

Acrobat Reader versions 20.005.30636, 24.002.20965, 24.002.20964, 24.001.30123 and earlier are affected by a Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability that could result in arbitrary code execution in the context of the current user. This issue occurs when the state of a resource changes between its check-time and use-time, allowing an attacker to manipulate the resource. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Adobe Systems Incorporated AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Adobe Systems Incorporated CWE-367

Adobe Systems Incorporated https://helpx.adobe.com/security/products/acrobat/apsb24-57.html [No types assigned]