Back Sploitus

Exploit for Use After Free in Adobe Acrobat_Dc

Sploitus • November 12, 2026

Share: View original

Proof-of-concept adapter for **CVE-2023-21608** affecting **Adobe Acrobat XI Use-After-Free**.

**Verified:** NO , generic legacy-module template, not validated against this specific CVE

**Source:** Metasploit adobe_libtiff (CVE-2013-2729)

# Verify only (safe, no exploit generation)

# Generate exploit file (lab use only, requires Docker/VM)

- `--verify-only` mode: safe verification without exploit generation

- No exploit authoring , adapts verified public Metasploit modules

- Lab-only: requires isolated VM/Docker with snapshot

- Verified: NO , generic legacy-module template, not validated against this specific CVE

- Source: Metasploit adobe_libtiff (CVE-2013-2729)

[cyberautomations.com](

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Multiple Exploits for Adobe Acrobat XI Vulnerabilities Disclosed A series of proof-of-concept (PoC) exploits have been released for vulnerabilities in Adobe Acrobat XI, including CVE-2021-21017 (Heap Buffer Overflow), CVE-2021-28550 (Use-After-Free), CVE-2018-4990 (Double Free), and CVE-2023-26369 (Out-of-Bounds Write). All exploits are categorized as unverified and are based on generic legacy-module templates from Metasploit, which have not been validated against the specific CVEs. The vulnerabilities affect Adobe Acrobat XI, which is known to have been under, particularly CVE-2021-28550 and CVE-2021-21017, both added to the CISA KEV list in November 2021. The current status indicates that while PoCs exist, they are intended for lab use only and require isolated environments for testing. Security professionals are advised to monitor these vulnerabilities closely due to their potential impact on systems still using Adobe Acrobat XI. 5 sources 52

Extracted Entities

Attack Types (1)

Zero-day Exploit

CVEs (2)

CVE-2013-2729 CVE-2023-21608

CWE Weaknesses (1)

CWE-416 - Use After Free

Platforms (1)

Tools (1)