Improper Privilege Management and vulnerabilities in various products reported by CISA

The summary for the week of May 13, 2024, by CISA highlights multiple cybersecurity vulnerabilities affecting various products including XStore Core, Adobe Acrobat Reader, Abdul Hakeem Build App Online, AA-Team WZone, Adobe Aero Desktop, Adobe Framemaker, and many others. These vulnerabilities range from Privilege Escalation, Unrestricted File Upload, Path Traversal, Use After Free, to SQL Injection, affecting a wide range of systems from n/a through version 7.4

1. For example, issues in Acrobat Reader versions 20.005.30574 and 24.002.20736 could allow arbitrary code execution, while vulnerabilities in Automation Studio versions before 4.12 may lead to code execution with elevated privileges. Attackers could exploit these vulnerabilities by accessing unsecured HTTP requests, processing crafted files, executing manipulated HTTP/HTTPS packets, or uploading malicious content, potentially leading to unauthorized actions and data breaches. ```
https://www.cisa.gov/news-events/alerts/2024/05/20/vulnerability-summary-week-may-13-2024