CVE-2024-34096: 
Adobe Acrobat Reader Continuous vulnerability analysis and mitigation

CVE-2024-34096 is a Use After Free vulnerability affecting Adobe Acrobat Reader versions 20.005.30574, 24.002.20736 and earlier on both Windows and macOS platforms. The vulnerability was disclosed on May 15, 2024, and was discovered by Adobe Systems Incorporated (Adobe Advisory).

The vulnerability is classified as a Use After Free (CWE-416) issue with a CVSS v3.1 Base Score of 7.8 (HIGH) and vector string CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H. The vulnerability requires local access and user interaction, specifically requiring a victim to open a malicious file (NVD).

Successful exploitation of this vulnerability could result in arbitrary code execution in the context of the current user. This means an attacker could potentially execute malicious code with the same privileges as the user running the affected Adobe Acrobat or Reader application (SecurityWeek).

The vulnerability requires user interaction, specifically opening a malicious file, to be exploited. Adobe has reported that there are no known exploits in the wild for this vulnerability (SecurityWeek).

Adobe has released security updates to address this vulnerability. Users are advised to update to the latest versions of Adobe Acrobat and Reader. The fix is included in versions after 20.005.30574 and 24.002.20736 (Adobe Advisory).