CVE-2021-44712 Adobe Acrobat Reader Memory Corruption could lead to Application denial-of-service

Acrobat Reader DC version 21.007.20099 and earlier, 20.004.30017 and earlier and 17.011.30204 and earlier are affected by an Access of Memory Location After End of Buffer vulnerability that could lead to application denial-of-service. Exploitation of this issue requires user interaction in that a...

CVE-2021-44712

CVE-2021-44712 affects Adobe Acrobat Reader DC versions up to 21.007.20099, 20.004.30017, and 17.011.30204. It is a memory corruption vulnerability (Access of Memory Location After End of Buffer) that could lead to a denial-of-service when a user opens a malicious file. Exploitation requires user...

CVE-2021-44713 Adobe Acrobat Reader DC Use After Free could lead to Application denial-of-service

Acrobat Reader DC version 21.007.20099 and earlier, 20.004.30017 and earlier and 17.011.30204 and earlier are affected by a use-after-free vulnerability in the processing of Format event actions that could result in application denial of service. Exploitation of this issue requires user interacti...

CVE-2021-44713

CVE-2021-44713 : Adobe Acrobat Reader DC is affected by a use-after-free in the processing of Format event actions, potentially leading to a crash/Denial of Service. Affected products/versions include Acrobat Reader DC 21.007.20099 and earlier, 20.004.30017 and earlier, and 17.011.30204 and earli...

CVE-2021-44742

CVE-2021-44742 affects Adobe Acrobat Reader DC (versions including 21.007.20099 and earlier; also listed as 20.004.30017 and 17.011.30204 and earlier). The issue is an out-of-bounds read during parsing of a crafted PDF, which could allow code execution in the context of the current user. Exploita...

CVE-2021-44704 Adobe Acrobat Reader Use-After-Free could lead to Arbitrary code execution

Acrobat Reader DC version 21.007.20099 and earlier, 20.004.30017 and earlier and 17.011.30204 and earlier are affected by a use-after-free vulnerability in the processing of Format event actions that could result in arbitrary code execution in the context of the current user. Exploitation of this...

CVE-2021-44704

CVE-2021-44704 is a use-after-free in Adobe Acrobat/Reader DC related to the processing of Format event actions that could allow arbitrary code execution in the current user context. Affected are Acrobat Reader DC versions 21.007.20099 and earlier, 20.004.30017 and earlier, and 17.011.30204 and e...

CVE-2021-44708

The CVE-2021-44708 entry describes a heap-overflow vulnerability in Adobe Acrobat/Reader DC caused by insecure handling of a crafted file. Affected versions include Acrobat Reader DC 21.007.20099 and earlier, 20.004.30017 and earlier, and 17.011.30204 and earlier. Exploitation can lead to arbitra...

CVE-2021-44739 Adobe Acrobat Reader DC add-on (AxAcroPDFLib.AxAcroPDF) src NTLMv2 SSO Auth leak vulnerability

Acrobat Reader DC ActiveX Control versions 21.007.20099 and earlier, 20.004.30017 and earlier and 17.011.30204 and earlier are affected by an Information Disclosure vulnerability. An unauthenticated attacker could leverage this vulnerability to obtain NTLMv2 credentials. Exploitation of this issu...

CVE-2021-44739

CVE-2021-44739 affects Acrobat Reader DC ActiveX Control, with NTLMv2 credential leakage via an Information Disclosure vulnerability in 21.007.20099 and earlier (also affects 20.004.30017 and 17.011.30204). Exploitation requires user interaction (open a malicious Office file or visit a crafted pa...

CVE-2021-44715 Adobe Acrobat Reader DC Out-of-Bounds Read Information Disclosure Vulnerability

Acrobat Reader DC version 21.007.20099 and earlier, 20.004.30017 and earlier and 17.011.30204 and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this...

CVE-2021-44715

CVE-2021-44715 refers to an out-of-bounds read in Adobe Acrobat Reader DC when parsing crafted files, allowing reading past allocated memory and potentially bypassing ASLR. Exploitation requires user interaction (victim opens a malicious file). Affected products/versions match Acrobat Reader DC, ...

CVE-2021-44702 Adobe Acrobat Reader DC add-on (AxAcroPDFLib.AxAcroPDF) for Internet Explorer LoadFile NTLMv2 SSO Auth leak vulnerability

Acrobat Reader DC ActiveX Control versions 21.007.20099 and earlier, 20.004.30017 and earlier and 17.011.30204 and earlier are affected by an Information Disclosure vulnerability. An unauthenticated attacker could leverage this vulnerability to obtain NTLMv2 credentials. Exploitation of this issu...

CVE-2021-44702

CVE-2021-44702 affects Adobe Acrobat Reader DC ActiveX (AxAcroPDF) in multiple legacy builds (e.g., 21.007.20099 and earlier; 20.004.30017 and earlier; 17.011.30204 and earlier). It is an information-disclosure flaw that could leak NTLMv2 credentials to an attacker, with exploitation requiring us...

CVE-2021-45064 Adobe Acrobat Reader DC AcroForm Use-After-Free Remote Code Execution Vulnerability

Acrobat Reader DC version 21.007.20099 and earlier, 20.004.30017 and earlier and 17.011.30204 and earlier are affected by a use-after-free vulnerability in the processing of Format event actions that could result in arbitrary code execution in the context of the current user. Exploitation of this...

CVE-2021-45064

CVE-2021-45064 is a use-after-free vulnerability in Adobe Acrobat Reader DC related to the processing of Format event actions, potentially allowing arbitrary code execution in the context of the current user. Affected products/versions (per sources): Acrobat Reader DC and Reader prior to 21.007.2...

CVE-2021-45061 Adobe Acrobat Reader DC Font Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

Acrobat Reader DC version 21.007.20099 and earlier, 20.004.30017 and earlier and 17.011.30204 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in...

CVE-2021-45061

CVE-2021-45061 is an out-of-bounds write vulnerability in Adobe Acrobat Reader DC font parsing that could allow arbitrary code execution in the context of the current user. Exploitation requires user interaction (victim opens a malicious file). Affected versions include Acrobat Reader DC 21.007.2...

CVE-2021-44706 Adobe Acrobat Reader Collab.registerReview Use-After-Free Remote Execution Vulnerability

Acrobat Reader DC version 21.007.20099 and earlier, 20.004.30017 and earlier and 17.011.30204 and earlier are affected by a use-after-free vulnerability in the processing of Format event actions that could result in arbitrary code execution in the context of the current user. Exploitation of this...

CVE-2021-44706

CVE-2021-44706 is a use‑after‑free vulnerability in Adobe Acrobat Reader DC affecting the processing of Format event actions, leading to arbitrary code execution in the context of the current user. Affected products/versions include Acrobat Reader DC 21.007.20099 and earlier, 20.004.30017 and ear...