CVE-2023-21611
HIGHAdobe Acrobat Reader <22.003.20282 - Privilege Escalation
Title source: llmDescription
Adobe Acrobat Reader versions 22.003.20282 (and earlier), 22.003.20281 (and earlier) and 20.005.30418 (and earlier) are affected by a Creation of Temporary File in Directory with Incorrect Permissions vulnerability that could result in privilege escalation in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Scores
CVSS v3
7.8
EPSS
0.0010
EPSS Percentile
26.9%
Attack Vector
LOCAL
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Classification
CWE
CWE-379
CWE-668
Status
published
Affected Products (4)
adobe/acrobat_dc
< 22.003.20282
adobe/acrobat_reader_dc
< 22.003.20282
adobe/acrobat
< 20.005.30418
adobe/acrobat_reader
< 20.005.30418
Timeline
Published
Jan 18, 2023
Tracked Since
Feb 18, 2026