CVE-2021-21028

🗓️ 11 Feb 2021 19:42:20Reported by adobeType

Adobe Acrobat Reader DC Use After Free vulnerability, allows arbitrary code executio

Reporter	Title	Published	Views	Family All 32
Tenable Nessus	Adobe Acrobat < 2017.011.30190 / 2020.001.30020 / 2021.001.20135 Multiple Vulnerabilities (APSB21-09)	11 Feb 202100:00	–	nessus
Tenable Nessus	Adobe Reader < 2017.011.30190 / 2020.001.30020 / 2021.001.20135 Multiple Vulnerabilities (APSB21-09)	11 Feb 202100:00	–	nessus
Tenable Nessus	Adobe Acrobat < 2017.011.30190 / 2020.001.30020 / 2021.001.20135 Multiple Vulnerabilities (APSB21-09) (macOS)	11 Feb 202100:00	–	nessus
Tenable Nessus	Adobe Reader < 2017.011.30190 / 2020.001.30020 / 2021.001.20135 Multiple Vulnerabilities (APSB21-09) (macOS)	11 Feb 202100:00	–	nessus
Circl	CVE-2021-21028	11 Feb 202122:47	–	circl
CNNVD	Acrobat Reader DC 资源管理错误漏洞	9 Feb 202100:00	–	cnnvd
CNVD	Memory Misreference Vulnerability in Multiple Adobe Products (CNVD-2021-11025)	10 Feb 202100:00	–	cnvd
Check Point Advisories	Adobe Acrobat and Reader Use After Free (APSB21-09: CVE-2021-21028)	9 Feb 202100:00	–	checkpoint_advisories
Cvelist	CVE-2021-21028 Acrobat Reader DC Use-After-Free Vulnerability Could Lead To Arbitrary Code Execution	11 Feb 202119:42	–	cvelist
Github Security Blog	Reflected Cross-site Scripting in ACS Commons	2 Feb 202115:46	–	github

NVD

Vulners

Node

adobe acrobatRange17.0–17.011.30188classic

adobe acrobatRange20.0–20.001.30018classic

adobe acrobat_dcRange≤20.013.20074continuous

adobe acrobat_readerRange17.0–17.011.30188classic

adobe acrobat_readerRange20.0–20.001.300183classic

adobe acrobat_reader_dcRange≤20.013.20074continuous

AND

apple macosMatch-

microsoft windowsMatch-

[
  {
    "product": "Acrobat Reader",
    "vendor": "Adobe",
    "versions": [
      {
        "lessThanOrEqual": "2020.013.20074",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      },
      {
        "lessThanOrEqual": "2020.001.30018",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      },
      {
        "lessThanOrEqual": "2017.011.30188",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      },
      {
        "lessThanOrEqual": "None",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
helpx	www.helpx.adobe.com/security/products/acrobat/apsb21-09.html

21 Nov 2024 05:47Current

8.7High risk

Vulners AI Score8.7

CVSS 26.8

CVSS 3.18.8

CVSS 38.8

EPSS0.22983

CWE-416

adobe acrobat reader dc use after free vulnerability arbitrary code execution nvd cve-2021-21028