CVE-2023-44367: 
Adobe Acrobat Reader Continuous vulnerability analysis and mitigation

CVE-2023-44367 is a Use After Free vulnerability affecting Adobe Acrobat Reader versions 23.006.20360 (and earlier) and 20.005.30524 (and earlier). The vulnerability was disclosed on November 14, 2023, and affects both Windows and macOS operating systems (NVD, Adobe Security).

This vulnerability is classified as a Use After Free (CWE-416) issue that could potentially lead to arbitrary code execution in the context of the current user. The vulnerability has been assigned a CVSS v3.1 base score of 7.8 (HIGH) with the following vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H. The exploitation requires user interaction, specifically requiring a victim to open a malicious file (NVD).

If successfully exploited, this vulnerability could result in arbitrary code execution in the context of the current user. This means an attacker could potentially install programs, view or modify data, or create new accounts with full user rights, depending on the victim's system privileges (CIS Security).

Adobe has released security updates to address this vulnerability. Users are advised to update to the latest versions of Adobe Acrobat and Reader. Organizations should apply appropriate updates provided by Adobe to vulnerable systems immediately after appropriate testing (Adobe Security).