CVE-2023-29320

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

Adobe Acrobat Reader versions 23.003.20244 (and earlier) and 20.005.30467 (and earlier) are affected by an Violation of Secure Design Principles vulnerability that could result in arbitrary code execution in the context of the current user by bypassing the API blacklisting feature. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-657

Affected software

No affected versions have been published.

Timeline

Published: Aug 10, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-293217.8Adobe Animate versions 22.0.9 (and earlier) and 23.0.1 (and earlier) are affected by a Use After Free vulnerability that could result in arb CVE-2023-293225.4Adobe Experience Manager versions 6.5.16.0 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If a low-privi CVE-2023-293237.8ascii_load_sockaddr in smtpd in OpenBSD before 7.1 errata 024 and 7.2 before errata 020, and OpenSMTPD Portable before 7.0.0-portable commit CVE-2023-293246.5Windows MSHTML Platform Security Feature Bypass Vulnerability CVE-2023-293257.5Windows OLE Remote Code Execution Vulnerability CVE-2023-293267.8.NET Framework Remote Code Execution Vulnerability CVE-2023-293288.8Microsoft Teams Remote Code Execution Vulnerability CVE-2023-29338.8Use after free in PDF in Google Chrome prior to 114.0.5735.90 allowed a remote attacker to potentially exploit heap corruption via a crafted CVE-2023-293308.8Microsoft Teams Remote Code Execution Vulnerability CVE-2023-293317.5.NET, .NET Framework, and Visual Studio Denial of Service Vulnerability CVE-2023-293329.8Microsoft Azure Kubernetes Service Elevation of Privilege Vulnerability CVE-2023-293333.3Microsoft Access Denial of Service Vulnerability