CVE-2021-35985 Adobe Acrobat Pro DC PDFLibTool Null Pointer Dereference Bug

Acrobat Reader DC versions 2021.005.20054 and earlier, 2020.004.30005 and earlier and 2017.011.30197 and earlier are affected by a Null pointer dereference vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve an application denial-of-service in the context of th...

CVE-2021-35983

CVE-2021-35983 affects Adobe Acrobat/Reader DC products (Acrobat Reader DC) up to 2021.005.20054, 2020.004.30005 and 2017.011.30197 and earlier. It is a Use-After-Free vulnerability in AcroForm that could allow arbitrary code execution in the context of the current user and requires user interact...

CVE-2021-35983 Adobe Acrobat Reader DC AcroForm Use-After-Free Remote Code Execution Vulnerability

Acrobat Reader DC versions 2021.005.20054 and earlier, 2020.004.30005 and earlier and 2017.011.30197 and earlier are affected by an Use-after-free vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user...

CVE-2021-28643 Adobe Acrobat Pro DC embedDocAsDataObject Type Confusion Information Disclosure Vulnerability

Acrobat Reader DC versions 2021.005.20054 and earlier, 2020.004.30005 and earlier and 2017.011.30197 and earlier are affected by a Type Confusion vulnerability. An unauthenticated attacker could leverage this vulnerability to disclose sensitive memory information in the context of the current use...

CVE-2021-28643

CVE-2021-28643 affects Adobe Acrobat Reader DC: Type Confusion in an embedDocAsDataObject path allows an unauthenticated attacker to disclose memory information in the context of the current user. Exploitation requires user interaction (victim must open a malicious file). Affected versions includ...

CVE-2021-28640

CVE-2021-28640 concerns an Use-after-free vulnerability in Adobe Acrobat/Reader DC (versions including 2021.005.20054 and earlier, 2020.004.30005 and earlier, 2017.011.30197 and earlier). Root cause: use-after-free in the application when loading a malicious file, leading to arbitrary code execut...

CVE-2021-28640 Adobe Acrobat Reader Use-After-Free Arbitrary Code Execution Vulnerability

Acrobat Reader DC versions 2021.005.20054 and earlier, 2020.004.30005 and earlier and 2017.011.30197 and earlier are affected by an Use-after-free vulnerability. An authenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user...

CVE-2021-28642

Adobe Acrobat/Reader DC is affected by CVE-2021-28642: an Out-of-bounds write in various Adobe Acrobat versions (Reader DC 2021.005.20054 and earlier, 2020.004.30005 and earlier, 2017.011.30197 and earlier) that allows arbitrary code execution in the context of the current user. Exploitation requ...

CVE-2021-28641

CVE-2021-28641 is an Adobe Acrobat Reader Use-After-Free vulnerability affecting Acrobat Reader DC (versions 2021.005.20054 and earlier; 2020.004.30005 and earlier; 2017.011.30197 and earlier). The flaw allows arbitrary code execution in the context of the current user and is exploitable by an un...

CVE-2021-28641 Adobe Acrobat Reader Use-After-Free Arbitrary Code Execution Vulnerability

Acrobat Reader DC versions 2021.005.20054 and earlier, 2020.004.30005 and earlier and 2017.011.30197 and earlier are affected by an Use-after-free vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user...

CVE-2021-28638

CVE-2021-28638 affects Adobe Acrobat Reader DC/Classic/Continuous in various older builds (Reader DC 2021.005.20054 and earlier; 2020.004.30005 and earlier; 2017.011.30197 and earlier) and is a heap-based buffer overflow in PDF parsing. An unauthenticated attacker could achieve arbitrary code exe...

CVE-2021-28638 Adobe Acrobat Reader DC PDF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

Acrobat Reader DC versions 2021.005.20054 and earlier, 2020.004.30005 and earlier and 2017.011.30197 and earlier are affected by a Heap-based Buffer overflow vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the...

CVE-2021-28639

Adobe Acrobat Reader DC (Windows/macOS) versions 2021.005.20054 and earlier, 2020.004.30005 and earlier, and 2017.011.30197 and earlier are affected by a Use-after-free vulnerability (CVE-2021-28639). The issue can lead to arbitrary code execution in the context of the current user, and exploitat...

CVE-2021-28639 Adobe Acrobat Reader DC setAction Use-After-Free Remote Code Execution Vulnerability

Acrobat Reader DC versions 2021.005.20054 and earlier, 2020.004.30005 and earlier and 2017.011.30197 and earlier are affected by an Use-after-free vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user...

CVE-2021-28636

CVE-2021-28636 is an Uncontrolled Search Path Element vulnerability in Adobe Acrobat Reader DC. Affected products include Acrobat Reader DC versions 2021.005.20054 (and earlier), 2020.004.30005 (and earlier), and 2017.011.30197 (and earlier). The underlying issue is an unsafely chosen search path...

CVE-2021-28636 Adobe Acrobat Reader Unquoted Search Path Vulnerability

Acrobat Reader DC versions 2021.005.20054 and earlier, 2020.004.30005 and earlier and 2017.011.30197 and earlier are affected by an Uncontrolled Search Path Element vulnerability. An attacker with access to the victim's C:/ folder could leverage this vulnerability to achieve arbitrary code...

CVE-2021-28635

CVE-2021-28635 corresponds to a use-after-free vulnerability in Adobe Acrobat/Reader products (Reader DC, Acrobat DC Classic/Continuous, and Acrobat Classic) prior to certain builds. The issue allows arbitrary code execution in the context of the current user and requires a user to open a malicio...

CVE-2021-28635 Adobe Acrobat Reader Use-After-Free Vulnerability

Acrobat Reader DC versions 2021.005.20054 and earlier, 2020.004.30005 and earlier and 2017.011.30197 and earlier are affected by a use-after-free vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user...

CVE-2021-28637

CVE-2021-28637 affects Adobe Acrobat/Reader: Acrobat Reader DC versions 2021.005.20054 and earlier, 2020.004.30005 and earlier, and 2017.011.30197 and earlier are vulnerable to an out-of-bounds read. Exploitation can yield arbitrary read/write of system information in the context of the current u...

CVE-2021-28637 Adobe Acrobat Pro DC PDFLibTool Out-of-Bounds Read Remote Code Execution Vulnerability

Acrobat Reader DC versions 2021.005.20054 and earlier, 2020.004.30005 and earlier and 2017.011.30197 and earlier are affected by an out-of-bounds read vulnerability. An unauthenticated attacker could leverage this vulnerability achieve arbitrary read / write system information in the context of t...