---
id: "CVE-2023-21608"
kind: "vulnerability"
aliases: ["CVE-2023-21608"]
title: "Adobe Acrobat Reader versions 22.003.20282 (and earlier), 22.003.20281 (and earlier) and 20.005.30418 (and earlier)\u2026"
severity: "high"
cvss: 7.8
epss: null
exploited: true
status: "open"
category: "package"
products: [{"name": "Adobe Acrobat and Reader", "fixed": [], "affected": "", "ecosystem": "vendor"}, {"name": "adobe acrobat dc", "fixed": [], "affected": ">= 15.008.20082, <= 22.003.20282", "ecosystem": "vendor"}, {"name": "adobe acrobat reader dc", "fixed": [], "affected": ">= 15.008.20082, <= 22.003.20282", "ecosystem": "vendor"}, {"name": "adobe acrobat dc", "fixed": [], "affected": ">= 15.008.20082, <= 22.003.20281", "ecosystem": "vendor"}, {"name": "adobe acrobat reader dc", "fixed": [], "affected": ">= 15.008.20082, <= 22.003.20281", "ecosystem": "vendor"}, {"name": "adobe acrobat", "fixed": [], "affected": ">= 20.001.30005, <= 20.005.30418", "ecosystem": "vendor"}, {"name": "adobe acrobat reader", "fixed": [], "affected": ">= 20.001.30005, <= 20.005.30418", "ecosystem": "vendor"}]
ecosystems: ["vendor"]
tags: ["adobe-acrobat", "adobe-reader", "desktop", "exploited", "macos", "package", "windows"]
not_affected_if: ["not-installed", "patched-version"]
published_at: "2023-01-18T19:15:11+00:00"
first_seen_at: "2026-10-23T19:11:51+00:00"
updated_at: "2026-10-23T22:29:04+00:00"
sources: [{"source": "kev", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-21608", "first_seen_at": "2026-10-23T19:11:51+00:00"}, {"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-21608", "first_seen_at": "2026-10-23T22:29:04+00:00"}]
---

# Adobe Acrobat Reader versions 22.003.20282 (and earlier), 22.003.20281 (and earlier) and 20.005.30418 (and earlier)…

Adobe Acrobat and Reader contain a use-after-free memory bug that lets a crafted file run code as the current user. CISA lists it as actively exploited in the wild.

_Summary, check and fix written by a model from the sources; labelled as such._

## Affected

- vendor:Adobe Acrobat and Reader affected ? fixed ?
- vendor:adobe acrobat dc affected >= 15.008.20082, <= 22.003.20282 fixed ?
- vendor:adobe acrobat reader dc affected >= 15.008.20082, <= 22.003.20282 fixed ?
- vendor:adobe acrobat dc affected >= 15.008.20082, <= 22.003.20281 fixed ?
- vendor:adobe acrobat reader dc affected >= 15.008.20082, <= 22.003.20281 fixed ?
- vendor:adobe acrobat affected >= 20.001.30005, <= 20.005.30418 fixed ?
- vendor:adobe acrobat reader affected >= 20.001.30005, <= 20.005.30418 fixed ?

## How to check

Open Acrobat or Reader and check Help > About to see the installed version; compare against the fixed release in Adobe's bulletin.

## Fix

Update Adobe Acrobat and Reader to the patched release named in Adobe's security bulletin, or follow the vendor mitigations if an update is not possible.
CISA says to discontinue use of the product if mitigations are unavailable.

## Timeline

- 2026-10-23T19:11:51+00:00 kev https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-21608
- 2026-10-23T22:29:04+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2023-21608

## From the sources

Adobe Acrobat Reader versions 22.003.20282 (and earlier), 22.003.20281 (and earlier) and 20.005.30418 (and earlier) are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_