Vulnerability · NVD
CVE-2026-48373
CVE-2026-48373, high severity (CVSS 7.8): 2 tracked apps concerned, all fixed or indeterminable on their current version.
- Severity (CVSS)
- 7.8
- Exploitation
- -
- Tracked apps
- 2
- Still exposed
- 0
NVD scale
Acrobat Reader is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Show raw CVSS vector
Tracked apps referencing this CVE
For each app: the affected range, the fixing version, and where the tracked app stands today.
-
Observed affected builds (12)
-
Observed affected builds (29)
24.001.20643 24.001.20629 24.001.20615 24.001.20604 23.008.20555 23.008.20533 23.008.20470 23.008.20421 23.006.20380 23.006.20360 23.006.20320 23.003.20284 23.003.20269 23.003.20244 23.003.20215 23.003.20201 23.001.20174 23.001.20143 23.001.20064 22.003.20310 22.003.20258 22.002.20212 22.002.20191 22.001.20169 22.001.20142 22.001.20117 22.001.20085 21.011.20039 21.007.20099
NVD references 5 distinct products for this CVE : only those tracked by Scout (mobile and desktop catalog apps) are listed above. Libraries, servers and out-of-scope products do not appear here. Full list on NVD ↗
Vulnerable CPE configurations (2)
| Vendor | Product | Platform | Versions | CPE 2.3 URI |
|---|---|---|---|---|
| adobe |
acrobat All platforms (wildcard)
|
All platforms (wildcard) | <24.001.30383 | cpe:2.3:a:adobe:acrobat:*:*:*:*:classic:*:*:* |
| adobe |
acrobat All platforms (wildcard)
|
All platforms (wildcard) | <24.001.30383 | cpe:2.3:a:adobe:acrobat:*:*:*:*:classic:*:*:* |
Manage your fleet with Appaloosa
Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.