Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2021-28550
HistorySep 02, 2021 - 5:15 p.m.

CVE-2021-28550

2021-09-0217:15:08
CWE-416
[email protected]
web.nvd.nist.gov
9
acrobat reader
use after free
vulnerability
arbitrary code execution
user interaction
malicious file

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS

0.409

Percentile

97.4%

JSON

Acrobat Reader DC versions versions 2021.001.20150 (and earlier), 2020.001.30020 (and earlier) and 2017.011.30194 (and earlier) are affected by a Use After Free vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Affected configurations

Nvd
Node
adobeacrobat_dcRange15.008.20082–21.001.20150continuous
OR
adobeacrobat_reader_dcRange15.008.20082–21.001.20150continuous
AND
microsoftwindowsMatch-
Node
adobeacrobatRange17.011.30059–17.011.30194classic
OR
adobeacrobatRange20.001.30005–20.001.30020classic
OR
adobeacrobat_readerRange17.011.30059–17.011.30194classic
OR
adobeacrobat_readerRange20.001.30005–20.001.30020classic
AND
applemacosMatch-
OR
microsoftwindowsMatch-
Node
adobeacrobat_dcRange15.008.20082–21.001.20150continuous
OR
adobeacrobat_reader_dcRange15.008.20082–21.001.20150continuous
AND
applemacosMatch-

Related

veracode 1
alpinelinux 1
cisa_kev 1
prion 1
cve 1
checkpoint_advisories 1
attackerkb 3
cvelist 1
thn 3
mscve 2
mssecure 1
mmpc 1
threatpost 2
krebs 1
adobe 1
openvas 12
nessus 4
kaspersky 1
qualysblog 3
veracode
veracode
Denial Of Service (DoS)
2021-06-22 23:04:19
alpinelinux
alpinelinux
CVE-2021-28550
2021-09-02 17:15:08
cisa_kev
cisa_kev
Adobe Acrobat and Reader Use-After-Free Vulnerability
2021-11-03 00:00:00
prion
prion
Design/Logic Flaw
2021-09-02 17:15:00
cve
cve
CVE-2021-28550
2021-09-02 17:15:08
checkpoint_advisories
checkpoint_advisories
Adobe Acrobat and Reader Use After Free (APSB21-29: CVE-2021-28550)
2021-05-11 00:00:00
attackerkb
attackerkb
CVE-2021-28550
2021-05-11 00:00:00
CVE-2021-31201
2021-06-08 00:00:00
CVE-2021-31199
2021-06-08 00:00:00
cvelist
cvelist
CVE-2021-28550 Adobe Acrobat Reader use after free vulnerability could lead to arbitrary code execution
2021-09-02 00:00:00
thn
thn
Alert: Hackers Exploit Adobe Reader 0-Day Vulnerability in the Wild
2021-05-12 05:41:00
Microsoft Uncovers Austrian Company Exploiting Windows and Adobe Zero-Day Exploits
2022-07-28 11:18:00
Update Your Windows Computers to Patch 6 New In-the-Wild Zero-Day Bugs
2021-06-09 06:07:00
mscve
mscve
Microsoft Enhanced Cryptographic Provider Elevation of Privilege Vulnerability
2021-06-08 07:00:00
Microsoft Enhanced Cryptographic Provider Elevation of Privilege Vulnerability
2021-06-08 07:00:00
mssecure
mssecure
Untangling KNOTWEED: European private-sector offensive actor using 0-day exploits
2022-07-27 14:00:00
mmpc
mmpc
Untangling KNOTWEED: European private-sector offensive actor using 0-day exploits
2022-07-27 14:00:00
threatpost
threatpost
Hackers Leverage Adobe Zero-Day Bug Impacting Acrobat Reader
2021-05-11 18:38:36
Microsoft Patch Tuesday Fixes 6 In-The-Wild Exploits
2021-06-08 21:45:12
krebs
krebs
Microsoft Patches Six Zero-Day Security Holes
2021-06-08 20:53:28
adobe
adobe
APSB21-29 Security update available for Adobe Acrobat and Reader
2021-05-11 00:00:00
openvas
openvas
Adobe Acrobat DC (Continuous) Security Update (APSB21-29) - Mac OS X
2022-03-29 00:00:00
Adobe Acrobat DC (Continuous) Security Update (APSB21-29) - Windows
2022-03-29 00:00:00
Adobe Acrobat Classic 2020 Security Update (APSB21-29) - Windows
2022-03-29 00:00:00
nessus
nessus
Adobe Reader <= 2017.011.30194 / 2020.001.30020 / 2021.001.20149 Multiple Vulnerabilities (APSB21-29) (macOS)
2021-05-11 00:00:00
Adobe Acrobat <= 2017.011.30194 / 2020.001.30020 / 2021.001.20150 Multiple Vulnerabilities (APSB21-29) (macOS)
2021-05-11 00:00:00
Adobe Reader <= 2017.011.30194 / 2020.001.30020 / 2021.001.20150 Multiple Vulnerabilities (APSB21-29)
2021-05-11 00:00:00
kaspersky
kaspersky
KLA12187 Multiple vulnerabilities in Adobe Acrobat and Adobe Acrobat Reader
2021-05-11 00:00:00
qualysblog
qualysblog
Microsoft & Adobe Patch Tuesday (May 2021) – Qualys covers 85 Vulnerabilities, 26 Critical
2021-05-11 21:53:37
Qualys Response to CISA Alert: Binding Operational Directive 22-01
2021-11-09 06:15:01
Managing CISA Known Exploited Vulnerabilities with Qualys VMDR
2022-02-23 05:39:00

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS

0.409

Percentile

97.4%

JSON
Related for NVD:CVE-2021-28550
veracode1alpinelinux1cisa_kev1prion1cve1checkpoint_advisories1attackerkb3cvelist1thn3mscve2mssecure1mmpc1threatpost2krebs1adobe1openvas12nessus4kaspersky1qualysblog3