Vulnerabilitymedium

Vulnerabilities in Adobe Acrobat, Microsoft Excel could lead to arbitrary code execution

Cisco TalosNov 22, 2023 · 17:00 UTC (Nov 22, 2023)2 min read3 · 1 read

Read at blog.talosintelligence.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2023-44336 CVE-2023-44372 CVE-2023-36041 CVE-2023-28391 CVE-2023-28379 CVE-2023-31247 CVE-2023-25181 CVE-2023-27882 CVE-2023-24585

Tags: cve-2023-44336 cve-2023-44372 cve-2023-36041 cve-2023-28391 cve-2023-28379 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2023-31247 +5 related CVEs CVE-2023-27882 CVE-2023-25181 CVE-2023-28379 CVE-2023-28391 CVE-2023-24585	A memory corruption vulnerability exists in the HTTP Server Host header parsing functionality of Weston Embedded uC-HTTP v3.01.01	9.8	2%	PoC	Nov 14, 2023
CVE-2023-36041	Microsoft Excel Remote Code Execution Vulnerability	7.8	57%	PoC	Nov 14, 2023
CVE-2023-44372 +1 related CVE CVE-2023-44336	Adobe Acrobat Reader versions 23.006.20360 (and earlier) and 20.005.30524 (and earlier) are affected by a Use After Free vulnerability that could result in…	7.8	3%		Nov 16, 2023

From the original article

2 min read at blog.talosintelligence.com

Cisco Talos’ Vulnerability Research team recently worked with Adobe and Microsoft to patch multiple vulnerabilities in the Acrobat and Excel software, respectively, that could lead to arbitrary code execution. Talos also disclosed six vulnerabilities in the Weston Embedded µC-HTTP HTTP server implementation, some of which could also lead to code execution.

Cisco Talos

blog.talosintelligence.com

Read the full article at Cisco Talos

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.