CVE-2021-28643 Adobe Acrobat Pro DC embedDocAsDataObject Type Confusion Information Disclosure Vulnerability

Acrobat Reader DC versions 2021.005.20054 and earlier, 2020.004.30005 and earlier and 2017.011.30197 and earlier are affected by a Type Confusion vulnerability. An unauthenticated attacker could leverage this vulnerability to disclose sensitive memory information in the context of the current use...

CVE-2021-28640

CVE-2021-28640 concerns an Use-after-free vulnerability in Adobe Acrobat/Reader DC (versions including 2021.005.20054 and earlier, 2020.004.30005 and earlier, 2017.011.30197 and earlier). Root cause: use-after-free in the application when loading a malicious file, leading to arbitrary code execut...

CVE-2021-28642

Adobe Acrobat/Reader DC is affected by CVE-2021-28642: an Out-of-bounds write in various Adobe Acrobat versions (Reader DC 2021.005.20054 and earlier, 2020.004.30005 and earlier, 2017.011.30197 and earlier) that allows arbitrary code execution in the context of the current user. Exploitation requ...

CVE-2021-28642 Adobe Acrobat Pro DC Out-of-Bounds Write Arbitrary Code Execution Vulnerability

Acrobat Reader DC versions 2021.005.20054 and earlier, 2020.004.30005 and earlier and 2017.011.30197 and earlier are affected by an Out-of-bounds write vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current...

CVE-2021-28641

CVE-2021-28641 is an Adobe Acrobat Reader Use-After-Free vulnerability affecting Acrobat Reader DC (versions 2021.005.20054 and earlier; 2020.004.30005 and earlier; 2017.011.30197 and earlier). The flaw allows arbitrary code execution in the context of the current user and is exploitable by an un...

CVE-2021-28638

CVE-2021-28638 affects Adobe Acrobat Reader DC/Classic/Continuous in various older builds (Reader DC 2021.005.20054 and earlier; 2020.004.30005 and earlier; 2017.011.30197 and earlier) and is a heap-based buffer overflow in PDF parsing. An unauthenticated attacker could achieve arbitrary code exe...

CVE-2021-28639

Adobe Acrobat Reader DC (Windows/macOS) versions 2021.005.20054 and earlier, 2020.004.30005 and earlier, and 2017.011.30197 and earlier are affected by a Use-after-free vulnerability (CVE-2021-28639). The issue can lead to arbitrary code execution in the context of the current user, and exploitat...

CVE-2021-28636

CVE-2021-28636 is an Uncontrolled Search Path Element vulnerability in Adobe Acrobat Reader DC. Affected products include Acrobat Reader DC versions 2021.005.20054 (and earlier), 2020.004.30005 (and earlier), and 2017.011.30197 (and earlier). The underlying issue is an unsafely chosen search path...

CVE-2021-28635

CVE-2021-28635 corresponds to a use-after-free vulnerability in Adobe Acrobat/Reader products (Reader DC, Acrobat DC Classic/Continuous, and Acrobat Classic) prior to certain builds. The issue allows arbitrary code execution in the context of the current user and requires a user to open a malicio...

CVE-2021-28634

CVE-2021-28634 affects Adobe Acrobat/Reader DC family. Specifically Acrobat Reader DC versions 2021.005.20054 and earlier, 2020.004.30005 and earlier, and 2017.011.30197 and earlier are vulnerable to Improper Neutralization of Special Elements used in an OS Command, enabling arbitrary code execut...

CVE-2021-28634: Improper Neutralization of Special Elements used in an OS Command

Acrobat Reader DC versions 2021.005.20054 and earlier, 2020.004.30005 and earlier and 2017.011.30197 and earlier are affected by an Improper Neutralization of Special Elements used in an OS Command. An authenticated attacker could leverage this vulnerability to achieve arbitrary code execution on...

CVE-2021-35981: Use After Free

Acrobat Reader DC versions 2021.005.20054 and earlier, 2020.004.30005 and earlier and 2017.011.30197 and earlier are affected by an Use-after-free vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user...

CVE-2021-28639: Use After Free

Acrobat Reader DC versions 2021.005.20054 and earlier, 2020.004.30005 and earlier and 2017.011.30197 and earlier are affected by an Use-after-free vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user...

CVE-2021-28636: Uncontrolled Search Path Element

Acrobat Reader DC versions 2021.005.20054 and earlier, 2020.004.30005 and earlier and 2017.011.30197 and earlier are affected by an Uncontrolled Search Path Element vulnerability. An attacker with access to the victim's C:/ folder could leverage this vulnerability to achieve arbitrary code...

CVE-2021-28641: Use After Free

Acrobat Reader DC versions 2021.005.20054 and earlier, 2020.004.30005 and earlier and 2017.011.30197 and earlier are affected by an Use-after-free vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user...

CVE-2021-28643: Access of Resource Using Incompatible Type

Acrobat Reader DC versions 2021.005.20054 and earlier, 2020.004.30005 and earlier and 2017.011.30197 and earlier are affected by a Type Confusion vulnerability. An unauthenticated attacker could leverage this vulnerability to disclose sensitive memory information in the context of the current use...

CVE-2021-35986: Access of Resource Using Incompatible Type

Acrobat Reader DC versions 2021.005.20054 and earlier, 2020.004.30005 and earlier and 2017.011.30197 and earlier are affected by an Type Confusion vulnerability. An unauthenticated attacker could leverage this vulnerability to read arbitrary system information in the context of the current user...

CVE-2021-35987: Out-of-bounds Read

Acrobat Reader DC versions 2021.005.20054 and earlier, 2020.004.30005 and earlier and 2017.011.30197 and earlier are affected by an out-of-bounds Read vulnerability. An unauthenticated attacker could leverage this vulnerability to disclose arbitrary memory information in the context of the curren...

CVE-2021-35984: NULL Pointer Dereference

Acrobat Reader DC versions 2021.005.20054 and earlier, 2020.004.30005 and earlier and 2017.011.30197 and earlier are affected by a Null pointer dereference vulnerability. An authenticated attacker could leverage this vulnerability achieve an application denial-of-service in the context of the...

CVE-2021-28638: Heap-based Buffer Overflow

Acrobat Reader DC versions 2021.005.20054 and earlier, 2020.004.30005 and earlier and 2017.011.30197 and earlier are affected by a Heap-based Buffer overflow vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the...