CVE-2024-49530: Acrobat Reader | Use After Free (CWE-416)
7.0
CVSS
Description
Acrobat Reader versions 24.005.20307, 24.001.30213, 24.001.30193, 20.005.30730, 20.005.30710 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Classification
CVE ID: CVE-2024-49530
CVSS Base Severity: HIGH
CVSS Base Score: 7.0
Affected Products
Vendor: Adobe
Product: Acrobat Reader
Exploit Prediction Scoring System (EPSS)
EPSS Score: 0.07% (probability of being exploited)
EPSS Percentile: 33.21% (scored less or equal to compared to others)
EPSS Date: 2025-02-03 (when was this score calculated)