CVE-2021-21034 Acrobat Reader DC Out-Of-Bounds Read Information Disclosure Vulnerability

Acrobat Reader DC versions versions 2020.013.20074 and earlier, 2020.001.30018 and earlier and 2017.011.30188 and earlier are affected by an Out-of-bounds Read vulnerability. An unauthenticated attacker could leverage this vulnerability to locally elevate privileges in the context of the current...

CVE-2021-21035

CVE-2021-21035 is a Use-After-Free vulnerability in Adobe Acrobat Reader DC affecting versions 2020.013.20074 and earlier, 2020.001.30018 and earlier, and 2017.011.30188 and earlier. An unauthenticated attacker could achieve arbitrary code execution in the context of the current user, with exploi...

CVE-2021-21042

CVE-2021-21042 affects Acrobat Reader DC and related versions (2020.013.20074 and earlier; 2020.001.30018 and earlier; 2017.011.30188 and earlier). It is an Out-of-bounds Read vulnerability that can lead to arbitrary disclosure of memory stack information and may bypass ASLR. Exploitation require...

CVE-2021-21044 Acrobat Reader DC Out-Of-Bounds Write Vulnerability Could Lead To Arbitrary Code Execution

Acrobat Reader DC versions versions 2020.013.20074 and earlier, 2020.001.30018 and earlier and 2017.011.30188 and earlier are affected by an Out-of-bounds Write vulnerability when parsing a crafted jpeg file. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code...

CVE-2021-21017 Acrobat Reader DC Heap-based Buffer Overflow Vulnerability Could Lead To Arbitrary Code Execution

Acrobat Reader DC versions versions 2020.013.20074 and earlier, 2020.001.30018 and earlier and 2017.011.30188 and earlier are affected by a heap-based buffer overflow vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of...

CVE-2021-21028 Acrobat Reader DC Use-After-Free Vulnerability Could Lead To Arbitrary Code Execution

Acrobat Reader DC versions versions 2020.013.20074 and earlier, 2020.001.30018 and earlier and 2017.011.30188 and earlier are affected by a Use After Free vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current...

CVE-2021-21017

CVE-2021-21017 affects Adobe Acrobat/Reader (DC Continuous and prior releases) with a heap-based buffer overflow that could allow arbitrary code execution in the user’s context after opening a malicious file. The linked exploit analyses describe a flaw in URL/baseURL handling within PDFs (potenti...

CVE-2021-21045 Acrobat Reader DC Improper Installer Access Control Vulnerability Could Lead To Privilege Escalation

Acrobat Reader DC versions versions 2020.013.20074 and earlier, 2020.001.30018 and earlier and 2017.011.30188 and earlier are affected by an improper access control vulnerability. An unauthenticated attacker could leverage this vulnerability to elevate privileges in the context of the current use...

CVE-2021-21057

CVE-2021-21057 affects Acrobat Reader DC: versions 2020.013.20074 and earlier, 2020.001.30018 and earlier, and 2017.011.30188 and earlier. It is a null pointer dereference vulnerability when parsing a specially crafted PDF, leading to denial of service in the context of the current user. Exploita...

CVE-2021-21017 Acrobat Reader DC Heap-based Buffer Overflow Vulnerability Could Lead To Arbitrary Code Execution

Acrobat Reader DC versions versions 2020.013.20074 and earlier, 2020.001.30018 and earlier and 2017.011.30188 and earlier are affected by a heap-based buffer overflow vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of...

CVE-2021-21045

CVE-2021-21045 affects Adobe Acrobat Reader DC; it is an improper access‑control vulnerability that could let an unauthenticated attacker elevate privileges in the current user context. Affected versions (per provided data): 2020.013.20074 and earlier, 2020.001.30018 and earlier, and 2017.011.301...

CVE-2021-21046 Acrobat Reader DC Buffer Overflow Vulnerability Could Lead To Arbitrary Code Execution

Acrobat Reader DC versions versions 2020.013.20074 and earlier, 2020.001.30018 and earlier and 2017.011.30188 and earlier are affected by an memory corruption vulnerability. An unauthenticated attacker could leverage this vulnerability to cause an application denial-of-service. Exploitation of th...

CVE-2021-21037 Acrobat Reader DC Path Traversal Vulnerability Could Lead To Arbitrary Code Execution

Acrobat Reader DC versions versions 2020.013.20074 and earlier, 2020.001.30018 and earlier and 2017.011.30188 and earlier are affected by a Path Traversal vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current...

CVE-2021-21044

CVE-2021-21044 affects Acrobat Reader DC: versions 2020.013.20074 and earlier, 2020.001.30018 and earlier, and 2017.011.30188 and earlier. It is an out-of-bounds write when parsing a crafted JPEG file, allowing an unauthenticated attacker to achieve arbitrary code execution in the context of the ...

CVE-2021-21042 Acrobat Reader DC Out-Of-Bounds Read Information Disclosure Vulnerability

Acrobat Reader DC versions 2020.013.20074 and earlier, 2020.001.30018 and earlier and 2017.011.30188 and earlier are affected by an Out-of-bounds Read vulnerability that could lead to arbitrary disclosure of information in the memory stack. An attacker could leverage this vulnerability to bypass...

CVE-2021-21057 Acrobat Reader DC Invalid Memory Read Due To An Uninitialized Pointer

Acrobat Reader DC versions versions 2020.013.20074 and earlier, 2020.001.30018 and earlier and 2017.011.30188 and earlier are affected by a null pointer dereference vulnerability when parsing a specially crafted PDF file. An unauthenticated attacker could leverage this vulnerability to achieve...

CVE-2021-21046

CVE-2021-21046 affects Adobe Acrobat Reader DC (versions listed as affected) with a memory corruption vulnerability that could allow an unauthenticated attacker to cause an application denial-of-service. Exploitation requires a user to open a specially crafted file. The connected documents confir...

CVE-2021-21037

CVE-2021-21037 (Adobe Acrobat Reader DC) is a path traversal vulnerability affecting multiple versions (e.g., 2020.013.20074 and earlier, 2020.001.30018 and earlier, 2017.011.30188 and earlier) that can lead to arbitrary code execution in the context of the current user after opening a malicious ...

CVE-2021-21028

Adobe Acrobat/Reader DC is affected by CVE-2021-21028 (Use-After-Free in PDF handling) across multiple old build lines (e.g., 2017.011.30188, 2020.001.30018, 2020.013.20074) with arbitrary code execution in the current user context. Exploitation requires user interaction (victim opens a malicious...

Adobe Acrobat Reader DC Annotation setProps Method Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Acrobat Reader DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handli...