Acrobat for Edge versions 126.0.2592.81 and earlier are affected by an out-of-bounds read vulnerability that could lead to arbitrary file system read access. An attacker could exploit this vulnerability to read contents from a location in memory past the buffer boundary, potentially leading to sensitive information disclosure. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

References

• https://nvd.nist.gov/vuln/detail/CVE-2024-39379
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-39379