U.S. Cybersecurity Agency Warns of Actively Exploited Adobe Acrobat Reader Vulnerability

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday added a high-severity flaw in Adobe Acrobat Reader to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation.
Tracked as CVE-2023-21608 (CVSS score: 7.8), the vulnerability has been described as a use-after-free bug that can be exploited to achieve remote code execution (RCE) with the

acrobat acrobat reader actively exploited adobe adobe acrobat agency bug catalog cisa cve cvss cybersecurity exploitation exploited exploited vulnerabilities flaw free high infrastructure infrastructure security kev known exploited known exploited vulnerabilities reader score security severity tuesday use-after-free vulnerabilities vulnerability