Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
kasperskyKaspersky LabKLA12187
HistoryMay 11, 2021 - 12:00 a.m.

KLA12187 Multiple vulnerabilities in Adobe Acrobat and Adobe Acrobat Reader

2021-05-1100:00:00
Kaspersky Lab
threats.kaspersky.com
49

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

8.5 High

AI Score

Confidence

Low

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.506 Medium

EPSS

Percentile

97.5%

JSON

Detect date:

05/11/2021

Severity:

Critical

Description:

Multiple vulnerabilities were found in Adobe Acrobat and Adobe Acrobat Reader. Malicious users can exploit these vulnerabilities to execute arbitrary code, obtain sensitive information, cause denial of service, gain privileges.

Exploitation:

Malware exists for this vulnerability. Usually such malware is classified as Exploit. More details.

Affected products:

Adobe Acrobat DC Continuous earlier than 2021.001.20155
Adobe Acrobat 2020 Classic earlier than 2020.001.30025
Adobe Acrobat 2017 Classic earlier than 2017.011.30196
Adobe Acrobat Reader DC Continuous earlier than 2021.001.20155
Adobe Acrobat Reader 2020 Classic earlier than 2020.001.30025
Adobe Acrobat Reader 2017 Classic earlier than 2017.011.30196

Solution:

Update to the latest version
Download Adobe Acrobat Reader DC

Original advisories:

APSB21-29

Impacts:

ACE

Related products:

Adobe Acrobat Reader DC Continuous

CVE-IDS:

CVE-2021-210447.8Critical
CVE-2021-210387.8Critical
CVE-2021-210867.8Critical
CVE-2021-285618.8Critical
CVE-2021-285608.8Critical
CVE-2021-285588.8Critical
CVE-2021-285574.3Warning
CVE-2021-285556.5High
CVE-2021-285658.8Critical
CVE-2021-285648.8Critical
CVE-2021-285595.3High
CVE-2021-285628.8Critical
CVE-2021-285508.8Critical
CVE-2021-285538.8Critical

References

Related

nessus 8
openvas 24
adobe 2
threatpost 3
talos 1
cve 14
prion 14
checkpoint_advisories 4
githubexploit 1
zdi 1
veracode 1
cisa_kev 1
alpinelinux 1
cnvd 1
attackerkb 3
qualysblog 3
thn 3
mscve 2
mssecure 1
mmpc 1
kaspersky 1
krebs 1
nessus
nessus
Adobe Reader <= 2017.011.30194 / 2020.001.30020 / 2021.001.20149 Multiple Vulnerabilities (APSB21-29) (macOS)
2021-05-11 00:00:00
Adobe Acrobat <= 2017.011.30194 / 2020.001.30020 / 2021.001.20150 Multiple Vulnerabilities (APSB21-29)
2021-05-11 00:00:00
Adobe Reader <= 2017.011.30194 / 2020.001.30020 / 2021.001.20150 Multiple Vulnerabilities (APSB21-29)
2021-05-11 00:00:00
openvas
openvas
Adobe Acrobat DC (Continuous) Security Update (APSB21-29) - Mac OS X
2022-03-29 00:00:00
Adobe Acrobat DC (Continuous) Security Update (APSB21-29) - Windows
2022-03-29 00:00:00
Adobe Reader Classic 2020 Security Update (APSB21-29) - Mac OS X
2022-03-29 00:00:00
adobe
adobe
APSB21-29 Security update available for Adobe Acrobat and Reader
2021-05-11 00:00:00
APSB21-09 Security update available for Adobe Acrobat and Reader
2021-02-09 00:00:00
threatpost
threatpost
Hackers Leverage Adobe Zero-Day Bug Impacting Acrobat Reader
2021-05-11 18:38:36
Microsoft Patch Tuesday Fixes 6 In-The-Wild Exploits
2021-06-08 21:45:12
Attackers Exploit Critical Adobe Bug, Target Windows
2021-02-09 19:40:47
talos
talos
Adobe Acrobat Reader DC JavaScript search query code execution vulnerability
2021-05-11 00:00:00
cve
cve
CVE-2021-28559
2021-09-02 17:15:00
CVE-2021-28558
2021-09-02 17:15:00
CVE-2021-28553
2021-09-02 17:15:00
prion
prion
Heap overflow
2021-09-02 17:15:00
Design/Logic Flaw
2021-06-28 14:15:00
Design/Logic Flaw
2021-09-02 17:15:00
checkpoint_advisories
checkpoint_advisories
Adobe Acrobat and Reader Heap-based Buffer Overflow (APSB21-29: CVE-2021-28560)
2021-05-11 00:00:00
Adobe Acrobat and Reader Out-of-bounds Write (APSB21-09: CVE-2021-21044)
2021-02-09 00:00:00
Adobe Acrobat and Reader Out-of-bounds Write (APSB21-09: CVE-2021-21038)
2021-02-09 00:00:00
githubexploit
githubexploit
Exploit for Out-of-bounds Write in Adobe Acrobat
2021-12-02 18:30:53
zdi
zdi
Adobe Acrobat Reader DC JPEG2000 Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
2021-02-10 00:00:00
veracode
veracode
Denial Of Service (DoS)
2021-06-22 23:04:19
cisa_kev
cisa_kev
Adobe Acrobat and Reader Use-After-Free Vulnerability
2021-11-03 00:00:00
alpinelinux
alpinelinux
CVE-2021-28550
2021-09-02 17:15:00
cnvd
cnvd
Adobe Acrobat Reader DC out-of-bounds write vulnerability
2021-05-07 00:00:00
attackerkb
attackerkb
CVE-2021-28550
2021-05-11 00:00:00
CVE-2021-31201
2021-06-08 00:00:00
CVE-2021-31199
2021-06-08 00:00:00
qualysblog
qualysblog
Microsoft & Adobe Patch Tuesday (May 2021) – Qualys covers 85 Vulnerabilities, 26 Critical
2021-05-11 21:53:37
Qualys Response to CISA Alert: Binding Operational Directive 22-01
2021-11-09 06:15:01
Managing CISA Known Exploited Vulnerabilities with Qualys VMDR
2022-02-23 05:39:00
thn
thn
Alert: Hackers Exploit Adobe Reader 0-Day Vulnerability in the Wild
2021-05-12 05:41:00
Microsoft Uncovers Austrian Company Exploiting Windows and Adobe Zero-Day Exploits
2022-07-28 11:18:00
Update Your Windows Computers to Patch 6 New In-the-Wild Zero-Day Bugs
2021-06-09 06:07:00
mscve
mscve
Microsoft Enhanced Cryptographic Provider Elevation of Privilege Vulnerability
2021-06-08 07:00:00
Microsoft Enhanced Cryptographic Provider Elevation of Privilege Vulnerability
2021-06-08 07:00:00
mssecure
mssecure
Untangling KNOTWEED: European private-sector offensive actor using 0-day exploits
2022-07-27 14:00:00
mmpc
mmpc
Untangling KNOTWEED: European private-sector offensive actor using 0-day exploits
2022-07-27 14:00:00
kaspersky
kaspersky
KLA12066 Multiple vulnerabilities in Adobe Acrobat and Adobe Acrobat Reader
2021-02-09 00:00:00
krebs
krebs
Microsoft Patches Six Zero-Day Security Holes
2021-06-08 20:53:28

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

8.5 High

AI Score

Confidence

Low

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.506 Medium

EPSS

Percentile

97.5%

JSON
Related for KLA12187
nessus8openvas24adobe2threatpost3talos1cve14prion14checkpoint_advisories4githubexploit1zdi1veracode1cisa_kev1alpinelinux1cnvd1attackerkb3qualysblog3thn3mscve2mssecure1mmpc1kaspersky1krebs1