CVE-2024-30306: 
Adobe Acrobat Reader Continuous vulnerability analysis and mitigation

Adobe Acrobat Reader versions 20.005.30539, 23.008.20470 and earlier are affected by an out-of-bounds read vulnerability identified as CVE-2024-30306. The vulnerability was discovered and disclosed on May 2, 2024, affecting Adobe Acrobat and Reader applications on both Windows and macOS operating systems (Adobe Advisory).

The vulnerability is classified as an out-of-bounds read issue (CWE-125) that occurs when parsing a crafted file, potentially resulting in a read past the end of an allocated memory structure. The vulnerability has received a CVSS v3.1 base score of 7.8 (High), with the vector string CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H (NVD).

Successful exploitation of this vulnerability could lead to arbitrary code execution in the context of the current user. The vulnerability could potentially allow an attacker to gain access to sensitive information, execute malicious code, and compromise system security (NVD).

Exploitation of this vulnerability requires user interaction, specifically requiring a victim to open a malicious file. The attack complexity is considered low, but requires local access and user interaction to be successful (NVD).

Adobe has released security updates to address this vulnerability. Users should update to versions newer than 20.005.30539 for classic versions and 23.008.20470 for continuous versions of Adobe Acrobat and Reader (Adobe Advisory).