Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cisa_kevCISACISA-KEV-CVE-2021-28550
HistoryNov 03, 2021 - 12:00 a.m.

Adobe Acrobat and Reader Use-After-Free Vulnerability

2021-11-0300:00:00
CISA
www.cisa.gov
1

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS

0.403

Percentile

97.3%

JSON

Adobe Acrobat and Reader contains a use-after-free vulnerability that could allow an unauthenticated attacker to achieve code execution in the context of the current user.

Related

veracode 1
alpinelinux 1
cvelist 1
nvd 1
checkpoint_advisories 1
attackerkb 3
cve 1
prion 1
thn 3
mscve 2
mssecure 1
mmpc 1
threatpost 2
krebs 1
openvas 12
adobe 1
nessus 4
kaspersky 1
qualysblog 3
veracode
veracode
Denial Of Service (DoS)
2021-06-22 23:04:19
alpinelinux
alpinelinux
CVE-2021-28550
2021-09-02 17:15:08
cvelist
cvelist
CVE-2021-28550 Adobe Acrobat Reader use after free vulnerability could lead to arbitrary code execution
2021-09-02 00:00:00
nvd
nvd
CVE-2021-28550
2021-09-02 17:15:08
checkpoint_advisories
checkpoint_advisories
Adobe Acrobat and Reader Use After Free (APSB21-29: CVE-2021-28550)
2021-05-11 00:00:00
attackerkb
attackerkb
CVE-2021-28550
2021-05-11 00:00:00
CVE-2021-31201
2021-06-08 00:00:00
CVE-2021-31199
2021-06-08 00:00:00
cve
cve
CVE-2021-28550
2021-09-02 17:15:08
prion
prion
Design/Logic Flaw
2021-09-02 17:15:00
thn
thn
Alert: Hackers Exploit Adobe Reader 0-Day Vulnerability in the Wild
2021-05-12 05:41:00
Microsoft Uncovers Austrian Company Exploiting Windows and Adobe Zero-Day Exploits
2022-07-28 11:18:00
Update Your Windows Computers to Patch 6 New In-the-Wild Zero-Day Bugs
2021-06-09 06:07:00
mscve
mscve
Microsoft Enhanced Cryptographic Provider Elevation of Privilege Vulnerability
2021-06-08 07:00:00
Microsoft Enhanced Cryptographic Provider Elevation of Privilege Vulnerability
2021-06-08 07:00:00
mssecure
mssecure
Untangling KNOTWEED: European private-sector offensive actor using 0-day exploits
2022-07-27 14:00:00
mmpc
mmpc
Untangling KNOTWEED: European private-sector offensive actor using 0-day exploits
2022-07-27 14:00:00
threatpost
threatpost
Hackers Leverage Adobe Zero-Day Bug Impacting Acrobat Reader
2021-05-11 18:38:36
Microsoft Patch Tuesday Fixes 6 In-The-Wild Exploits
2021-06-08 21:45:12
krebs
krebs
Microsoft Patches Six Zero-Day Security Holes
2021-06-08 20:53:28
openvas
openvas
Adobe Acrobat 2017 Security Update (APSB21-29) - Windows
2022-03-28 00:00:00
Adobe Acrobat 2017 Security Update (APSB21-29) - Mac OS X
2022-03-28 00:00:00
Adobe Reader Classic 2020 Security Update (APSB21-29) - Mac OS X
2022-03-29 00:00:00
adobe
adobe
APSB21-29 Security update available for Adobe Acrobat and Reader
2021-05-11 00:00:00
nessus
nessus
Adobe Acrobat <= 2017.011.30194 / 2020.001.30020 / 2021.001.20150 Multiple Vulnerabilities (APSB21-29)
2021-05-11 00:00:00
Adobe Reader <= 2017.011.30194 / 2020.001.30020 / 2021.001.20149 Multiple Vulnerabilities (APSB21-29) (macOS)
2021-05-11 00:00:00
Adobe Reader <= 2017.011.30194 / 2020.001.30020 / 2021.001.20150 Multiple Vulnerabilities (APSB21-29)
2021-05-11 00:00:00
kaspersky
kaspersky
KLA12187 Multiple vulnerabilities in Adobe Acrobat and Adobe Acrobat Reader
2021-05-11 00:00:00
qualysblog
qualysblog
Microsoft & Adobe Patch Tuesday (May 2021) – Qualys covers 85 Vulnerabilities, 26 Critical
2021-05-11 21:53:37
Qualys Response to CISA Alert: Binding Operational Directive 22-01
2021-11-09 06:15:01
Managing CISA Known Exploited Vulnerabilities with Qualys VMDR
2022-02-23 05:39:00

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS

0.403

Percentile

97.3%

JSON
Related for CISA-KEV-CVE-2021-28550
veracode1alpinelinux1cvelist1nvd1checkpoint_advisories1attackerkb3cve1prion1thn3mscve2mssecure1mmpc1threatpost2krebs1openvas12adobe1nessus4kaspersky1qualysblog3