CVE-2021-40723 Acrobat Reader DC Out-Of-Bounds Read Information Disclosure Vulnerability

Acrobat Reader DC versions versions 2020.013.20074 and earlier, 2020.001.30018 and earlier and 2017.011.30188 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such...

CVE-2021-40723

CVE-2021-40723 affects Adobe Acrobat Reader DC: out-of-bounds read could disclose memory and bypass mitigations like ASLR. A victim must open a malicious file to exploit. Affected versions include 2020.013.20074 and earlier, 2020.001.30018 and earlier, and 2017.011.30188 and earlier. No remediati...

Adobe Acrobat Reader DC 缓冲区错误漏洞

Adobe Acrobat Reader DC is a Pdf reading tool from the American company Audobee Adobe. Used to reliably view, print and annotate Pdf documents. Adobe Acrobat Reader DC suffers from an out-of-bounds read vulnerability that can be exploited by an attacker to cause a sensitive memory leak...

CVE-2021-39859

Acrobat Reader DC versions 2021.005.20060 and earlier, 2020.004.30006 and earlier and 2017.011.30199 and earlier are affected by a Use After Free vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR...

CVE-2021-39859

Acrobat Reader DC versions 2021.005.20060 and earlier, 2020.004.30006 and earlier and 2017.011.30199 and earlier are affected by a Use After Free vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR...

CVE-2021-28644

Acrobat Reader DC versions 2021.005.20054 and earlier, 2020.004.30005 and earlier and 2017.011.30197 and earlier are affected by a Path traversal vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user...

CVE-2021-21088

Acrobat Reader DC versions versions 2020.013.20074 and earlier, 2020.001.30018 and earlier and 2017.011.30188 and earlier are affected by a Use After Free vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current...

CVE-2021-35980

Acrobat Reader DC versions 2021.005.20054 and earlier, 2020.004.30005 and earlier and 2017.011.30197 and earlier are affected by a Path traversal vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user...

CVE-2021-35980

Acrobat Reader DC versions 2021.005.20054 and earlier, 2020.004.30005 and earlier and 2017.011.30197 and earlier are affected by a Path traversal vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user...

CVE-2021-28644

Acrobat Reader DC versions 2021.005.20054 and earlier, 2020.004.30005 and earlier and 2017.011.30197 and earlier are affected by a Path traversal vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user...

Path traversal

Acrobat Reader DC versions 2021.005.20054 and earlier, 2020.004.30005 and earlier and 2017.011.30197 and earlier are affected by a Path traversal vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user...

Design/Logic Flaw

Acrobat Reader DC versions 2021.005.20060 and earlier, 2020.004.30006 and earlier and 2017.011.30199 and earlier are affected by a Use After Free vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR...

Design/Logic Flaw

Acrobat Reader DC versions versions 2020.013.20074 and earlier, 2020.001.30018 and earlier and 2017.011.30188 and earlier are affected by a Use After Free vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current...

CVE-2021-21088

Adobe Acrobat Reader DC is affected by a Use-After-Free vulnerability (CVE-2021-21088) that could allow arbitrary code execution in the current user’s context. Affected versions include 2020.013.20074 and earlier, 2020.001.30018 and earlier, and 2017.011.30188 and earlier. Exploitation requires u...

CVE-2021-39859

CVE-2021-39859 affects Adobe Acrobat/Reader DC: Acrobat Reader DC versions 2021.005.20060 and earlier, 2020.004.30006 and earlier, and 2017.011.30199 and earlier are vulnerable to a Use-After-Free that can disclose sensitive memory and bypass ASLR. Exploitation requires user interaction (victim m...

CVE-2021-39859 Use After Free Adobe Acrobat Pro DC [HB-21-0339]

Acrobat Reader DC versions 2021.005.20060 and earlier, 2020.004.30006 and earlier and 2017.011.30199 and earlier are affected by a Use After Free vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR...

CVE-2021-35980 Adobe Acrobat Reader SpellDictionaryExport Path Traversal Remote Code Execution Vulnerability

Acrobat Reader DC versions 2021.005.20054 and earlier, 2020.004.30005 and earlier and 2017.011.30197 and earlier are affected by a Path traversal vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user...

CVE-2021-35980

CVE-2021-35980 affects Acrobat Reader DC (versions including 2021.005.20054 and earlier; 2020.004.30005 and earlier; 2017.011.30197 and earlier) and is a path-traversal vulnerability that could allow arbitrary code execution in the context of the current user. Exploitation requires user interacti...

CVE-2021-28644

CVE-2021-28644 affects Adobe Acrobat/Reader DC before the patched releases. A path traversal flaw allows an unauthenticated attacker to achieve arbitrary code execution in the context of the current user when a victim opens a crafted file, requiring user interaction. Affected products include Acr...

The vulnerabilities of PDF viewing and editing programs like Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, and Adobe Acrobat 2020/Adobe Acrobat Reader 2020 involve memory management issues after the memory is freed, allowing attackers to gain unauthorized access to protected information.

The vulnerability of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2020, and Adobe Acrobat Reader 2020 is related to the use of memory after it is freed during the processing of annotation objects. Exploiting this...