ZDI-24-167: Adobe Acrobat Pro DC AcroForm Use-After-Free Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Adobe Acrobat Pro DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 3.3. The following CVEs are assigned: CVE-2024-20734.

acrobat adobe adobe acrobat attackers cvss disclosure exploit file free information information disclosure information disclosure vulnerability malicious page pro rating sensitive sensitive information target use-after-free vulnerability zdi