Design/Logic Flaw

Acrobat Reader DC versions versions 2021.001.20150 and earlier, 2020.001.30020 and earlier and 2017.011.30194 and earlier are affected by an Out-of-bounds Read vulnerability. An unauthenticated attacker could leverage this vulnerability to get access to sensitive information in the context of the...

CVE-2021-21086

Acrobat Reader DC versions versions 2020.013.20074 and earlier, 2020.001.30018 and earlier and 2017.011.30188 and earlier are affected by an Out-of-bounds Write vulnerability in the CoolType library. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution...

CVE-2021-21086

Acrobat Reader DC versions versions 2020.013.20074 and earlier, 2020.001.30018 and earlier and 2017.011.30188 and earlier are affected by an Out-of-bounds Write vulnerability in the CoolType library. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution...

Cross site scripting

Acrobat Reader DC versions versions 2020.013.20074 and earlier, 2020.001.30018 and earlier and 2017.011.30188 and earlier are affected by an Out-of-bounds Write vulnerability in the CoolType library. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution...

CVE-2021-21086

Acrobat Reader DC versions versions 2020.013.20074 and earlier, 2020.001.30018 and earlier and 2017.011.30188 and earlier are affected by an Out-of-bounds Write vulnerability in the CoolType library. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution...

CVE-2021-28564

Technical details specific to CVE-2021-28564 are not provided in the connected documents. The materials reference Adobe Acrobat vulnerabilities generally; monitor for updates.

CVE-2021-28564 Adobe Acrobat Reader out-of-bounds write vulnerability could lead to arbitrary code execution

Acrobat Reader DC versions versions 2021.001.20150 and earlier, 2020.001.30020 and earlier and 2017.011.30194 and earlier are affected by an Out-of-bounds Write vulnerability within the ImageTool component. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code...

EUVD-2021-15236

Acrobat Reader DC versions versions 2021.001.20150 and earlier, 2020.001.30020 and earlier and 2017.011.30194 and earlier are affected by a memory corruption vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the...

CVE-2021-28561 Adobe Acrobat Reader memory corruption vulnerability could lead to remote code execution

Acrobat Reader DC versions versions 2021.001.20150 and earlier, 2020.001.30020 and earlier and 2017.011.30194 and earlier are affected by a memory corruption vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the...

CVE-2021-28561

CVE-2021-28561 affects Adobe Acrobat/Reader DC family with a memory corruption vulnerability that could allow arbitrary code execution in the context of the current user. Exploitation requires the user to open a malicious file, i.e., user interaction is required. The provided connected OpenVAS en...

CVE-2021-28559 Adobe Acrobat Reader privacy violation vulnerability could lead to privilege escalation

Acrobat Reader DC versions versions 2021.001.20150 and earlier, 2020.001.30020 and earlier and 2017.011.30194 and earlier are affected by an Information Exposure vulnerability. An unauthenticated attacker could leverage this vulnerability to get access to restricted data stored within global...

CVE-2021-28559

Technical details about CVE-2021-28559 are not provided in the connected documents. The OpenVAS entries reference the CVE in broader Adobe vulnerability contexts but do not specify affected products, versions, impact, or fixes. Monitor for updates.

CVE-2021-28565 Adobe Acrobat Reader out-of-bounds read could lead to information exposure

Acrobat Reader DC versions versions 2021.001.20150 and earlier, 2020.001.30020 and earlier and 2017.011.30194 and earlier are affected by an Out-of-bounds Read vulnerability in the PDFLibTool component. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code...

CVE-2021-28565

CVE-2021-28565 affects Adobe Acrobat family (Reader DC, Acrobat DC/Classic) with Out-of-bounds Read in PDFLibTool. Affected: Acrobat Reader DC 2017.011.30194 and earlier; 2020.001.30020 and earlier; 2021.001.20150 and earlier (and related Acrobat DC/Classic lines). Exploitation could lead to arbi...

CVE-2021-28560

Technical details for CVE-2021-28560 are not publicly provided in the connected documents; monitor for updates.

CVE-2021-28557 Adobe Acrobat Reader out-of-bounds read in PDFLibTool could lead to information exposure

Acrobat Reader DC versions versions 2021.001.20150 and earlier, 2020.001.30020 and earlier and 2017.011.30194 and earlier are affected by an Out-of-bounds Read vulnerability. An unauthenticated attacker could leverage this vulnerability to leak sensitive system information in the context of the...

CVE-2021-28557

Technical details for CVE-2021-28557 are not publicly available in the provided documents. Monitor for updates.

CVE-2021-28553 Adobe Acrobat Reader use-after-free vulnerability could lead to arbitrary code execution

Acrobat Reader DC versions versions 2021.001.20150 and earlier, 2020.001.30020 and earlier and 2017.011.30194 and earlier are affected by an Use After Free vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the curren...

CVE-2021-28553

CVE-2021-28553 affects Adobe Acrobat Reader DC (and related variants) versions listed in the entry: 2021.001.20150 and earlier, 2020.001.30020 and earlier, and 2017.011.30194 and earlier. It describes a Use-After-Free vulnerability that could allow arbitrary code execution in the context of the c...

CVE-2021-28550 Adobe Acrobat Reader use after free vulnerability could lead to arbitrary code execution

Acrobat Reader DC versions versions 2021.001.20150 and earlier, 2020.001.30020 and earlier and 2017.011.30194 and earlier are affected by a Use After Free vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current...