Multiple vulnerabilities in Adobe Acrobat Reader could lead to remote code execution

Summary: Cisco Talos disclosed more than 30 vulnerabilities in February, including seven in Adobe Acrobat Reader that an adversary could exploit by tricking a user into opening a specially crafted PDF, typically delivered as an email attachment or download link. The Acrobat flaws include out-of-bounds reads (CVE-2024-20735, CVE-2024-20747, CVE-2024-20749) and buffer overflows (CVE-2024-20731, CVE-2024-20729, CVE-2024-20730) that could lead to arbitrary code execution, plus an out-of-bounds read (CVE-2024-20748) that could disclose sensitive process information to aid further exploitation.
Why it matters: The delivery mechanism is a PDF opened by a user, so the seven Acrobat flaws sit directly in the path of everyday email traffic; separately, Talos rated all its Libbiosig vulnerabilities, which affect a library processing medical signal data such as ECG and respiration readings, at a CVSS score of 9.8 out of 10.

Read the original at Cisco Talos ↗

Topics: Vulnerabilities & Patching
Mentions: CVE-2024-20729 CVE-2024-20730 CVE-2024-20731 CVE-2024-20735 CVE-2024-20747 CVE-2024-20748 CVE-2024-20749 CVE-2024-21795 CVE-2024-21812 CVE-2024-22097 CVE-2024-23305 CVE-2024-23310 CVE-2024-23313 CVE-2024-23606 CVE-2024-23809 CVE-2024-24793 CVE-2024-24794
Related: Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026
U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026
PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026