Executive Summary

This vulnerability affects Acrobat Reader versions 24.001.30365, 26.001.21651 and earlier. It is an Uncontrolled Search Path Element vulnerability that could allow an attacker to execute arbitrary code with the privileges of the current user.

To exploit this vulnerability, the attacker needs the victim to open a malicious file, meaning user interaction is required.

The scope of the vulnerability is changed, indicating that the impact extends beyond the initially vulnerable component.

Useful 0 Not Useful 0

Impact Analysis

If exploited, this vulnerability can lead to arbitrary code execution in the context of the current user.

This means an attacker could potentially run malicious code with the same permissions as the user who opened the malicious file.

The impact could include unauthorized actions such as data theft, installation of malware, or other malicious activities depending on the user's privileges.

Useful 0 Not Useful 0