The Download
Adobe released a critical update for Acrobat Reader, addressing a zero-day vulnerability (CVE-2023-38646) that is already being exploited in the wild. This vulnerability allows remote attackers to execute arbitrary code on a victim’s system through a maliciously crafted PDF file. IT administrators should be aware of the urgency of this patch due to its public proof-of-concept (PoC) exploit, making systems without the patch highly vulnerable to attack.
The flaw tracked as CVE-2024-41869 has now been patched by Adobe.
What You Can Do
To safeguard against this vulnerability, IT administrators must immediately update all instances of Adobe Acrobat Reader to the latest version. Additionally, they should enforce best practices such as disabling JavaScript in Acrobat Reader, using endpoint protection tools, and regularly auditing software to ensure timely patching.
ThreatMate endpoint agent will identify applications on endpoint with vulnerabilities and assess the risk of them being exploited. Cover your attack surfaces with ThreatMate.
To Learn More:
Comments