Vulnerability in Adobe Acrobat
CVE-2024-39425
Acrobat Reader versions 20.005.30636, 24.002.20965, 24.002.20964, 24.001.30123 and earlier are affected by a Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability that could lead to privilege escalation. Exploitation of this issu…
Vulnerability class: TOCTOU (Time-of-Check to Time-of-Use)
EPSS: 0.002 (10.2th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 7.0 (High). Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H.
Affected products
Weakness classification (CWE)
References
- psirt@adobe.com (vendor-advisory, Vendor Advisory)
Frequently asked questions
- What is CVE-2024-39425?
- CVE-2024-39425 is a high-severity vulnerability in Adobe Acrobat, classified under Time-of-check Time-of-use (TOCTOU) Race Condition. CVSS score: 7.0/10. Published 2024-08-14.
- How severe is CVE-2024-39425?
- High severity. CVSS v3 base score is 7.0 out of 10.