{"id":"CVE-2024-41869","published":"2024-09-13T08:58:58Z","modified":"2024-09-13T13:43:45Z","title":"Acrobat Reader | Use After Free (CWE-416)","vendor":"Adobe","product":"Acrobat Reader","tier":"core","eol":null,"affectedVersions":[{"vendor":"Adobe","product":"Acrobat Reader","versions":["<= 24.003.20054"]}],"description":{"text":"Acrobat Reader versions 24.002.21005, 24.001.30159, 20.005.30655, 24.003.20054 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.","provenance":"source","from":"CVE.org"},"summary":null,"cvss":{"score":7.8,"severity":"HIGH","version":"3.1","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","provenance":"source","from":"CVE.org CNA"},"epss":{"score":0.02352,"percentile":0.8372,"date":"2026-10-31","provenance":"source"},"kev":null,"vulncheckKev":{"dateAdded":"2024-09-11","exploitedFirstSeen":"2024-09-11","ransomware":false,"evidence":[{"url":"https://www.cybersecurity-help.cz/vdb/SB20240910117","date":"2024-09-11"}],"evidenceTotal":1,"provenance":"source"},"exploited":true,"otx":null,"cwes":[{"id":"CWE-416","name":"Use After Free"}],"references":[{"url":"https://helpx.adobe.com/security/products/acrobat/apsb24-70.html","tags":["vendor-advisory"]}],"techniques":[],"reports":[],"affected":[],"advisories":[],"euvd":{"id":"EUVD-2024-39246","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-39246","exploited":false,"exploitedSince":null,"provenance":"source"},"exploits":[],"exploitSources":null,"exploitRefs":[],"flow":[],"timeline":[{"date":"2024-09-11","kind":"exploited-reported","label":"Exploitation first reported (VulnCheck KEV evidence)","url":"https://www.cybersecurity-help.cz/vdb/SB20240910117","provenance":"source"},{"date":"2024-09-13","kind":"published","label":"Published (CVE.org)","url":"https://www.cve.org/CVERecord?id=CVE-2024-41869","provenance":"source"}],"speed":{"daysToPublicExploit":null,"firstExploitFrom":null,"daysToKev":null},"priority":{"score":57.2,"factors":[{"name":"In a KEV catalog","points":35.0,"detail":"listed in VulnCheck KEV"},{"name":"Recent KEV listing","points":0.0,"detail":"added 781 days ago"},{"name":"Known ransomware use","points":0.0,"detail":"not known"},{"name":"EPSS percentile","points":16.74,"detail":"percentile 0.8372"},{"name":"Named in threat reports","points":0.0,"detail":"0 reports"},{"name":"Public exploit code","points":0.0,"detail":"none found"},{"name":"Mentioned in OTX pulses","points":0.0,"detail":"0 pulses"},{"name":"CVSS severity","points":5.46,"detail":"base score 7.8"},{"name":"End-of-life product","points":0.0,"detail":"supported or unknown"}]}}