Adobe Acrobat Uninstaller Hard Link Leads To Remote Code Execution

Acrobat Reader DC version 22.001.2011x (and earlier), 20.005.3033x (and earlier) and 17.012.3022x (and earlier) are affected by an uncontrolled search path vulnerability that could lead to local privilege escalation. Exploitation of this issue requires user interaction in that a victim must run the uninstaller with Admin privileges.

CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H

对搜索路径元素未加控制

多款Adobe产品代码问题漏洞

Adobe Acrobat和Adobe Acrobat Reader都是美国奥多比（Adobe）公司的产品。Adobe Acrobat是一套PDF文件编辑和转换工具。Adobe Acrobat Reader是一款PDF查看器。该软件用于打印，签名和注释 PDF。 Adobe Acrobat和Adobe Acrobat Reader存在代码问题漏洞，该漏洞源于缺少完整性检查。攻击者利用该漏洞提升权限并在系统上执行任意代码。

N/A

N/A