Cross site scripting

Acrobat Reader DC versions 2021.005.20054 and earlier, 2020.004.30005 and earlier and 2017.011.30197 and earlier are affected by an Out-of-bounds write vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current...

Design/Logic Flaw

Acrobat Reader DC versions 2021.005.20054 and earlier, 2020.004.30005 and earlier and 2017.011.30197 and earlier are affected by an Use-after-free vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user...

Design/Logic Flaw

Acrobat Reader DC versions 2021.005.20054 and earlier, 2020.004.30005 and earlier and 2017.011.30197 and earlier are affected by a use-after-free vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user...

CVE-2021-35988

CVE-2021-35988 affects Adobe Acrobat components (e.g., Acrobat Reader DC/Classic/DC Continuous) and is tracked in OpenVAS as part of APSB21-51. The issue is an Out-of-bounds Read that could disclose arbitrary memory under the context of the current user; exploitation requires the user to open a m...

CVE-2021-35984

CVE-2021-35984 affects Acrobat Reader DC/Classic/Continuous (various versions up to 2021.005.20054, 2020.004.30005, 2017.011.30197, etc.). The issue is a null pointer dereference in the PDF processing code that can cause an application denial-of-service in the context of the current user. An atta...

CVE-2021-35987

Adobe Acrobat/Reader DC is affected by an out-of-bounds Read vulnerability for versions 2021.005.20054 and earlier, 2020.004.30005 and earlier, and 2017.011.30197 and earlier. An unauthenticated attacker could disclose arbitrary memory information in the context of the current user, with exploita...

CVE-2021-35987 Adobe Acrobat Pro DC PDFLibTool Out-of-Bound Read

Acrobat Reader DC versions 2021.005.20054 and earlier, 2020.004.30005 and earlier and 2017.011.30197 and earlier are affected by an out-of-bounds Read vulnerability. An unauthenticated attacker could leverage this vulnerability to disclose arbitrary memory information in the context of the curren...

CVE-2021-35986

CVE-2021-35986 affects Acrobat Reader DC: versions 2021.005.20054 and earlier, 2020.004.30005 and earlier, and 2017.011.30197 and earlier are affected by a Type Confusion vulnerability allowing an unauthenticated attacker to read arbitrary system information in the context of the current user. Ex...

CVE-2021-35981

CVE-2021-35981 affects Adobe Acrobat Reader DC. The Use-after-Free vulnerability exists in versions including 2021.005.20054 (and earlier), 2020.004.30005 (and earlier), and 2017.011.30197 (and earlier). An unauthenticated attacker could achieve arbitrary code execution in the user’s context, but...

CVE-2021-35981 Adobe Acrobat Reader DC launchURL Use-After-Free Remote Code Execution Vulnerability

Acrobat Reader DC versions 2021.005.20054 and earlier, 2020.004.30005 and earlier and 2017.011.30197 and earlier are affected by an Use-after-free vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user...

CVE-2021-35985

CVE-2021-35985 affects Adobe Acrobat/Reader DC (including 2021.005.20054 and earlier; 2020.004.30005 and earlier; 2017.011.30197 and earlier) via a Null Pointer Dereference in PDF processing. Root cause described as a null dereference that can cause an application crash (DoS) in the context of th...

CVE-2021-35985 Adobe Acrobat Pro DC PDFLibTool Null Pointer Dereference Bug

Acrobat Reader DC versions 2021.005.20054 and earlier, 2020.004.30005 and earlier and 2017.011.30197 and earlier are affected by a Null pointer dereference vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve an application denial-of-service in the context of th...

CVE-2021-35983 Adobe Acrobat Reader DC AcroForm Use-After-Free Remote Code Execution Vulnerability

Acrobat Reader DC versions 2021.005.20054 and earlier, 2020.004.30005 and earlier and 2017.011.30197 and earlier are affected by an Use-after-free vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user...

CVE-2021-35983

CVE-2021-35983 affects Adobe Acrobat/Reader DC products (Acrobat Reader DC) up to 2021.005.20054, 2020.004.30005 and 2017.011.30197 and earlier. It is a Use-After-Free vulnerability in AcroForm that could allow arbitrary code execution in the context of the current user and requires user interact...

CVE-2021-28643 Adobe Acrobat Pro DC embedDocAsDataObject Type Confusion Information Disclosure Vulnerability

Acrobat Reader DC versions 2021.005.20054 and earlier, 2020.004.30005 and earlier and 2017.011.30197 and earlier are affected by a Type Confusion vulnerability. An unauthenticated attacker could leverage this vulnerability to disclose sensitive memory information in the context of the current use...

CVE-2021-28643

CVE-2021-28643 affects Adobe Acrobat Reader DC: Type Confusion in an embedDocAsDataObject path allows an unauthenticated attacker to disclose memory information in the context of the current user. Exploitation requires user interaction (victim must open a malicious file). Affected versions includ...

CVE-2021-28640 Adobe Acrobat Reader Use-After-Free Arbitrary Code Execution Vulnerability

Acrobat Reader DC versions 2021.005.20054 and earlier, 2020.004.30005 and earlier and 2017.011.30197 and earlier are affected by an Use-after-free vulnerability. An authenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user...

CVE-2021-28640

CVE-2021-28640 concerns an Use-after-free vulnerability in Adobe Acrobat/Reader DC (versions including 2021.005.20054 and earlier, 2020.004.30005 and earlier, 2017.011.30197 and earlier). Root cause: use-after-free in the application when loading a malicious file, leading to arbitrary code execut...

CVE-2021-28642

Adobe Acrobat/Reader DC is affected by CVE-2021-28642: an Out-of-bounds write in various Adobe Acrobat versions (Reader DC 2021.005.20054 and earlier, 2020.004.30005 and earlier, 2017.011.30197 and earlier) that allows arbitrary code execution in the context of the current user. Exploitation requ...

CVE-2021-28641 Adobe Acrobat Reader Use-After-Free Arbitrary Code Execution Vulnerability

Acrobat Reader DC versions 2021.005.20054 and earlier, 2020.004.30005 and earlier and 2017.011.30197 and earlier are affected by an Use-after-free vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user...