CVE-2021-44739

CVE-2021-44739 affects Acrobat Reader DC ActiveX Control, with NTLMv2 credential leakage via an Information Disclosure vulnerability in 21.007.20099 and earlier (also affects 20.004.30017 and 17.011.30204). Exploitation requires user interaction (open a malicious Office file or visit a crafted pa...

CVE-2021-44715 Adobe Acrobat Reader DC Out-of-Bounds Read Information Disclosure Vulnerability

Acrobat Reader DC version 21.007.20099 and earlier, 20.004.30017 and earlier and 17.011.30204 and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this...

CVE-2021-44715

CVE-2021-44715 refers to an out-of-bounds read in Adobe Acrobat Reader DC when parsing crafted files, allowing reading past allocated memory and potentially bypassing ASLR. Exploitation requires user interaction (victim opens a malicious file). Affected products/versions match Acrobat Reader DC, ...

CVE-2021-44702 Adobe Acrobat Reader DC add-on (AxAcroPDFLib.AxAcroPDF) for Internet Explorer LoadFile NTLMv2 SSO Auth leak vulnerability

Acrobat Reader DC ActiveX Control versions 21.007.20099 and earlier, 20.004.30017 and earlier and 17.011.30204 and earlier are affected by an Information Disclosure vulnerability. An unauthenticated attacker could leverage this vulnerability to obtain NTLMv2 credentials. Exploitation of this issu...

CVE-2021-44702

CVE-2021-44702 affects Adobe Acrobat Reader DC ActiveX (AxAcroPDF) in multiple legacy builds (e.g., 21.007.20099 and earlier; 20.004.30017 and earlier; 17.011.30204 and earlier). It is an information-disclosure flaw that could leak NTLMv2 credentials to an attacker, with exploitation requiring us...

CVE-2021-45064 Adobe Acrobat Reader DC AcroForm Use-After-Free Remote Code Execution Vulnerability

Acrobat Reader DC version 21.007.20099 and earlier, 20.004.30017 and earlier and 17.011.30204 and earlier are affected by a use-after-free vulnerability in the processing of Format event actions that could result in arbitrary code execution in the context of the current user. Exploitation of this...

CVE-2021-45064

CVE-2021-45064 is a use-after-free vulnerability in Adobe Acrobat Reader DC related to the processing of Format event actions, potentially allowing arbitrary code execution in the context of the current user. Affected products/versions (per sources): Acrobat Reader DC and Reader prior to 21.007.2...

CVE-2021-45061 Adobe Acrobat Reader DC Font Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

Acrobat Reader DC version 21.007.20099 and earlier, 20.004.30017 and earlier and 17.011.30204 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in...

CVE-2021-45061

CVE-2021-45061 is an out-of-bounds write vulnerability in Adobe Acrobat Reader DC font parsing that could allow arbitrary code execution in the context of the current user. Exploitation requires user interaction (victim opens a malicious file). Affected versions include Acrobat Reader DC 21.007.2...

CVE-2021-44706 Adobe Acrobat Reader Collab.registerReview Use-After-Free Remote Execution Vulnerability

Acrobat Reader DC version 21.007.20099 and earlier, 20.004.30017 and earlier and 17.011.30204 and earlier are affected by a use-after-free vulnerability in the processing of Format event actions that could result in arbitrary code execution in the context of the current user. Exploitation of this...

CVE-2021-44706

CVE-2021-44706 is a use‑after‑free vulnerability in Adobe Acrobat Reader DC affecting the processing of Format event actions, leading to arbitrary code execution in the context of the current user. Affected products/versions include Acrobat Reader DC 21.007.20099 and earlier, 20.004.30017 and ear...

CVE-2021-45060

CVE-2021-45060 affects Adobe Acrobat Reader DC versions 21.007.20099 and earlier, 20.004.30017 and earlier, and 17.011.30204 and earlier. The issue is an out-of-bounds read during parsing of a crafted file, which could cause a read past the end of an allocated memory structure and enable code exe...

CVE-2021-45060 Adobe Acrobat Reader DC TTF Font Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

Acrobat Reader DC version 21.007.20099 and earlier, 20.004.30017 and earlier and 17.011.30204 and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this...

CVE-2021-44707

The CVE-2021-44707 entry affects Adobe Acrobat Reader DC and related components. Affected versions include Acrobat Reader DC 21.007.20099 and earlier, 20.004.30017 and earlier, and 17.011.30204 and earlier. The vulnerability is an out-of-bounds write in OTF font parsing that could allow arbitrary...

CVE-2021-44707 Adobe Acrobat Reader DC OTF Font Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

Acrobat Reader DC version 21.007.20099 and earlier, 20.004.30017 and earlier and 17.011.30204 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in...

CVE-2021-45063 Adobe Acrobat Reader DC JP2 File Parsing Use-After-Free Information Disclosure Vulnerability

Acrobat Reader DC version 21.007.20099 and earlier, 20.004.30017 and earlier and 17.011.30204 and earlier are affected by a use-after-free vulnerability in the processing of Format event actions that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to...

CVE-2021-45063

Adobe Acrobat Reader DC contains a use-after-free vulnerability (CVE-2021-45063) in the handling of Format event actions, affecting versions 21.007.20099 and earlier, 20.004.30017 and earlier, and 17.011.30204 and earlier. Root cause is a use-after-free that can disclose memory contents; exploita...

CVE-2021-44711 Adobe Acrobat Reader DC annotation gestures integer overflow vulnerability

Acrobat Reader DC version 21.007.20099 and earlier, 20.004.30017 and earlier and 17.011.30204 and earlier are affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user...

CVE-2021-44711

CVE-2021-44711 affects Adobe Acrobat Reader DC and related components (versions 21.007.20099 and earlier; 20.004.30017 and earlier; 17.011.30204 and earlier) with an Integer Overflow/Wraparound in annotation gestures that can lead to arbitrary code execution under the current user. Exploitation r...

CVE-2021-44741

Adobe Acrobat Reader DC is affected by CVE-2021-44741: a NULL pointer dereference when parsing a specially crafted file. This allows an unauthenticated attacker to cause an application denial-of-service in the context of the current user, with exploitation requiring user interaction (victim must ...