CVE-2024-30303: 
Adobe Acrobat Reader Continuous vulnerability analysis and mitigation

A Use After Free vulnerability (CVE-2024-30303) affects Adobe Acrobat Reader versions 20.005.30539, 23.008.20470 and earlier. The vulnerability was disclosed on May 2, 2024, and impacts both Adobe Acrobat and Acrobat Reader across Classic and Continuous versions on Windows and macOS platforms (Adobe Advisory).

The vulnerability is classified as a Use After Free (CWE-416) issue that could lead to arbitrary code execution in the context of the current user. The vulnerability has received a CVSS v3.1 base score of 7.8 (High), with the following vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H. This indicates local access is required, with low attack complexity, no privileges required, and user interaction is necessary (NVD).

If successfully exploited, this vulnerability could result in arbitrary code execution in the context of the current user, potentially allowing an attacker to gain the same level of access and privileges as the affected user (Adobe Advisory).

Exploitation of this vulnerability requires user interaction, specifically requiring a victim to open a malicious file. The attack complexity is considered low, but local access is necessary for exploitation (NVD).

Adobe has addressed this vulnerability in updated versions of their software. Users should update to Acrobat Classic version 20.005.30574 or later, and Acrobat Continuous version 23.008.20533 or later (Adobe Advisory).