CVE-2024-41869
Estado: AnalizadaAlta (7.8)—
Acrobat Reader versions 24.002.21005, 24.001.30159, 20.005.30655, 24.003.20054 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS
- Versión: 3.1
- Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
- Puntuación base: 7.8
Probabilidad de explotación (EPSS)
- Probabilidad de explotación en los próximos 30 días: 2.34%
- Percentil entre todas las CVEs puntuadas: 83
- Fecha de la puntuación: 6/10/2026
EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).
Tecnologías afectadas (4)
CWE
- CWE-416
Referencias
JSON original (NVD)
Mostrar
{
"id": "CVE-2024-41869",
"cveTags": [],
"metrics": {
"ssvcV203": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"ssvcData": {
"id": "CVE-2024-41869",
"role": "CISA Coordinator",
"options": [
{
"exploitation": "none"
},
{
"automatable": "no"
},
{
"technicalImpact": "total"
}
],
"version": "2.0.3",
"timestamp": "2024-09-13T13:33:36.953019Z"
}
}
],
"cvssMetricV31": [
{
"type": "Secondary",
"source": "psirt@adobe.com",
"cvssData": {
"scope": "UNCHANGED",
"version": "3.1",
"baseScore": 7.8,
"attackVector": "LOCAL",
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"integrityImpact": "HIGH",
"userInteraction": "REQUIRED",
"attackComplexity": "LOW",
"availabilityImpact": "HIGH",
"privilegesRequired": "NONE",
"confidentialityImpact": "HIGH"
},
"impactScore": 5.9,
"exploitabilityScore": 1.8
}
]
},
"affected": [
{
"source": "psirt@adobe.com",
"affectedData": [
{
"vendor": "Adobe",
"product": "Acrobat Reader",
"versions": [
{
"status": "affected",
"version": "0",
"versionType": "semver",
"lessThanOrEqual": "24.003.20054"
}
],
"defaultStatus": "affected"
}
]
},
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"affectedData": [
{
"cpes": [
"cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:*:windows:*:*"
],
"vendor": "adobe",
"product": "acrobat_dc",
"versions": [
{
"status": "affected",
"version": "0",
"versionType": "semver",
"lessThanOrEqual": "24.003.20054"
}
],
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:*:macos:*:*"
],
"vendor": "adobe",
"product": "acrobat_dc",
"versions": [
{
"status": "affected",
"version": "0",
"versionType": "semver",
"lessThanOrEqual": "24.002.21005"
}
],
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*"
],
"vendor": "adobe",
"product": "acrobat",
"versions": [
{
"status": "affected",
"version": "24.0",
"versionType": "custom",
"lessThanOrEqual": "24.001.30159"
}
],
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:2.3:a:adobe:acrobat:*:*:*:*:*:windows:*:*"
],
"vendor": "adobe",
"product": "acrobat",
"versions": [
{
"status": "affected",
"version": "24.0",
"versionType": "semver",
"lessThanOrEqual": "24.001.30159"
},
{
"status": "affected",
"version": "20.0",
"versionType": "semver",
"lessThanOrEqual": "20.005.30655"
}
],
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:windows:*:*"
],
"vendor": "adobe",
"product": "acrobat_reader",
"versions": [
{
"status": "affected",
"version": "0",
"versionType": "custom",
"lessThanOrEqual": "20.005.30636"
}
],
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:macos:*:*"
],
"vendor": "adobe",
"product": "acrobat_reader",
"versions": [
{
"status": "affected",
"version": "20.0",
"versionType": "custom",
"lessThanOrEqual": "20.005.30635"
}
],
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:windows:*:*"
],
"vendor": "adobe",
"product": "acrobat_reader_dc",
"versions": [
{
"status": "affected",
"version": "0",
"versionType": "semver",
"lessThanOrEqual": "24.002.20991"
}
],
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:windows:*:*"
],
"vendor": "adobe",
"product": "acrobat_reader",
"versions": [
{
"status": "affected",
"version": "20.0",
"versionType": "custom",
"lessThanOrEqual": "20.005.30635"
}
],
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:macos:*:*",
"cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:windows:*:*"
],
"vendor": "adobe",
"product": "acrobat_reader_dc",
"versions": [
{
"status": "affected",
"version": "20.0",
"versionType": "custom",
"lessThanOrEqual": "24.002.21005"
},
{
"status": "affected",
"version": "20.0",
"versionType": "custom",
"lessThanOrEqual": "24.003.20054"
}
],
"defaultStatus": "affected"
}
]
}
],
"published": "2024-09-13T09:15:11.257",
"references": [
{
"url": "https://helpx.adobe.com/security/products/acrobat/apsb24-70.html",
"tags": [
"Vendor Advisory"
],
"source": "psirt@adobe.com"
}
],
"vulnStatus": "Analyzed",
"weaknesses": [
{
"type": "Secondary",
"source": "psirt@adobe.com",
"description": [
{
"lang": "en",
"value": "CWE-416"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Acrobat Reader versions 24.002.21005, 24.001.30159, 20.005.30655, 24.003.20054 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
},
{
"lang": "es",
"value": "Las versiones 24.002.21005, 24.001.30159, 20.005.30655, 24.003.20054 y anteriores de Acrobat Reader se ven afectadas por una vulnerabilidad de tipo Use After Free que podría provocar la ejecución de código arbitrario en el contexto del usuario actual. Para explotar este problema es necesaria la interacción del usuario, ya que la víctima debe abrir un archivo malicioso."
}
],
"lastModified": "2026-06-17T07:48:22.570",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:adobe:acrobat:*:*:*:*:classic:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F8CB85E3-4183-439B-820C-C68A71736286",
"versionEndExcluding": "20.005.30680"
},
{
"criteria": "cpe:2.3:a:adobe:acrobat:*:*:*:*:classic:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F4F08A81-BF99-40EC-9312-4F8EE7DD3A2C",
"versionEndExcluding": "24.001.30187",
"versionStartIncluding": "24.001.0"
},
{
"criteria": "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2BF3AF68-11D8-44D4-97FF-D32EDBACDF5D",
"versionEndExcluding": "24.003.20112",
"versionStartIncluding": "24.003.0"
},
{
"criteria": "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:classic:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3CF5F37B-E9B2-4EF4-AE2B-5DE4C6F76D7D",
"versionEndExcluding": "20.005.30680"
},
{
"criteria": "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C60CADAA-ECD4-4545-8C61-5D36B57AE838",
"versionEndExcluding": "24.003.20112",
"versionStartIncluding": "24.003.0"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "4C56F007-5F8E-4BDD-A803-C907BCC0AF55"
},
{
"criteria": "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
}
],
"operator": "OR"
}
],
"operator": "AND"
}
],
"sourceIdentifier": "psirt@adobe.com"
}