Tracker / CVE-2024-49535
CVE-2024-49535
Medium 6.3
Acrobat Reader versions 24.005.20307, 24.001.30213, 24.001.30193, 20.005.30730, 20.005.30710 and earlier are affected by an Improper Restriction of XML External Entity Reference ('XXE') vulnerability that allows an attacker to provide malicious XML input containing a reference to an external entity, potentially leading to unauthorized read access outside the Acrobat sandbox. Exploitation of this issue requires user interaction in that a victim must process a malicious XML document.
Affected products and versions
| adobe | acrobat · 20.001.30002 → 20.005.30748 |
|---|---|
| adobe | acrobat · 24.0.0 → 24.001.30225 |
| adobe | acrobat_dc · … → 24.005.20320 |
| adobe | acrobat_reader · 20.001.30002 → 20.005.30748 |
| adobe | acrobat_reader_dc · … → 24.005.20320 |
Analysis
This page is not indexable yet.Until it carries original analysis — what it actually exposes, how to check in two minutes whether a system was touched, what to do if it was — the page stays noindex. The database decides that, not the template.