CVE-2024-34101: 
Adobe Acrobat Reader Continuous vulnerability analysis and mitigation

CVE-2024-34101 is an out-of-bounds read vulnerability affecting Adobe Acrobat Reader versions 20.005.30574, 24.002.20736 and earlier. The vulnerability was discovered and disclosed in May 2024, impacting both Windows and macOS operating systems (Adobe Advisory).

The vulnerability is classified as an out-of-bounds read issue (CWE-125) that could lead to disclosure of sensitive memory. The vulnerability has received a CVSS v3.1 Base Score of 5.5 (Medium) with the vector string CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N (NVD).

Successful exploitation of this vulnerability could lead to disclosure of sensitive memory and potentially allow attackers to bypass security mitigations such as ASLR (Address Space Layout Randomization). The vulnerability affects confidentiality but does not impact system integrity or availability (NVD).

Exploitation of this vulnerability requires user interaction, specifically requiring a victim to open a malicious file. The attack complexity is considered low, but local access is required for exploitation (NVD).

Adobe has released security updates to address this vulnerability. Users should update to the latest versions of Adobe Acrobat and Reader (Adobe Advisory).