Acrobat For Edge
Monthly
Out-of-bounds write in Adobe Acrobat for Edge can lead to arbitrary code execution in the context of the current user when a victim opens a crafted PDF. The flaw is remotely reachable with low attack complexity and no attacker authentication, but it requires user interaction and does not by itself elevate privileges beyond the current user. No public exploit code has been identified at time of analysis, though the high CVSS score and Edge default PDF-handler exposure make prompt patching advisable.
Out-of-bounds read in Adobe Acrobat for Edge can disclose sensitive memory contents when a user opens a maliciously crafted PDF or visits attacker-controlled web content in Microsoft Edge. Default Edge installations that use the Acrobat/PDF rendering component are affected; exploitation requires user interaction (UI:R) and no privileges (PR:N), but impact is limited to confidentiality (C:L) with a CVSS base score of 4.3. No public exploit identified at time of analysis.
Out-of-bounds write in Adobe Acrobat for Edge can lead to arbitrary code execution in the context of the current user when a victim opens a crafted PDF. The flaw is remotely reachable with low attack complexity and no attacker authentication, but it requires user interaction and does not by itself elevate privileges beyond the current user. No public exploit code has been identified at time of analysis, though the high CVSS score and Edge default PDF-handler exposure make prompt patching advisable.
Out-of-bounds read in Adobe Acrobat for Edge can disclose sensitive memory contents when a user opens a maliciously crafted PDF or visits attacker-controlled web content in Microsoft Edge. Default Edge installations that use the Acrobat/PDF rendering component are affected; exploitation requires user interaction (UI:R) and no privileges (PR:N), but impact is limited to confidentiality (C:L) with a CVSS base score of 4.3. No public exploit identified at time of analysis.