CVE-2023-26395: 
Adobe Acrobat Reader Continuous vulnerability analysis and mitigation

Adobe Acrobat Reader versions 23.001.20093 (and earlier) and 20.005.30441 (and earlier) are affected by an out-of-bounds write vulnerability identified as CVE-2023-26395. The vulnerability was discovered on February 22, 2023, and publicly disclosed on April 12, 2023. This security flaw affects both Windows and macOS operating systems running Adobe Acrobat and Reader applications (NVD, Adobe Advisory).

The vulnerability is classified as an out-of-bounds write (CWE-787) issue. It has received a CVSS v3.1 base score of 7.8 (HIGH) with the following vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H. The vulnerability requires local access and user interaction for successful exploitation (NVD).

If successfully exploited, this vulnerability could result in arbitrary code execution in the context of the current user. The high CVSS score indicates potential severe impacts on system confidentiality, integrity, and availability (NVD).

Adobe has released security updates to address this vulnerability. Users should update their Adobe Acrobat and Reader installations to the latest versions available through the official Adobe channels (Adobe Advisory).