CVE-2021-39860 Adobe Acrobat Reader DC Search Plugin Null Pointer Dereference

Acrobat Pro DC versions 2021.005.20060 and earlier, 2020.004.30006 and earlier and 2017.011.30199 and earlier are affected by a Null pointer dereference vulnerability. An unauthenticated attacker could leverage this vulnerability to disclose sensitive user memory. Exploitation of this issue...

CVE-2021-39855

CVE-2021-39855 affects Adobe Acrobat Reader DC ActiveX Control: vulnerable versions include 2021.005.20060 and earlier, 2020.004.30006 and earlier, and 2017.011.30199 and earlier. The issue is an information-disclosure vulnerability that could allow an unauthenticated attacker to obtain NTLMv2 cr...

CVE-2021-39849

Adobe Acrobat: CVE-2021-39849 is a Null Pointer Dereference in Acrobat Reader DC (and related Classic/Continuous updates) that can cause an application DoS in the context of the logged-in user. Exploitation requires user interaction (victim opens a malicious file). Affected versions include Acrob...

CVE-2021-39850

CVE-2021-39850 refers to a Null pointer dereference in Adobe Acrobat Reader DC affecting versions 2021.005.20060 (and earlier), 2020.004.30006 (and earlier), and 2017.011.30199 (and earlier). The vulnerability allows an unauthenticated attacker to cause an application denial-of-service in the con...

CVE-2021-39852

CVE-2021-39852 affects Adobe Acrobat Reader DC (versions 2021.005.20060 and earlier, 2020.004.30006 and earlier, 2017.011.30199 and earlier). It is a Null pointer dereference vulnerability that can cause an application denial-of-service in the context of the current user. Exploitation requires us...

CVE-2021-39851

CVE-2021-39851 affects Adobe Acrobat Reader DC (variants listed in the initial document) with a Null Pointer Dereference that can cause an application denial-of-service in the context of the current user. An unauthenticated attacker could trigger this by convincing a victim to open a malicious fi...

CVE-2021-39853

CVE-2021-39853 affects Adobe Acrobat Reader DC: versions 2021.005.20060 and earlier, 2020.004.30006 and earlier, and 2017.011.30199 and earlier. The flaw is a null pointer dereference that can cause an application denial-of-service in the context of the current user. An unauthenticated attacker c...

CVE-2021-39845

CVE-2021-39845 affects Acrobat Reader DC, including 2021.005.20060 and earlier, 2020.004.30006 and earlier, and 2017.011.30199 and earlier. It is a stack overflow vulnerability caused by insecure handling of crafted PDF files, leading to memory corruption in the user’s context. Exploitation requi...

CVE-2021-39844

CVE-2021-39844 affects Adobe Acrobat Reader DC and Acrobat Reader prior to 2017.011.30202/2020.004.30015/2021.007.20091. It is an out-of-bounds read vulnerability that could disclose arbitrary memory information in the context of the current user. Exploitation requires user interaction: the victi...

CVE-2021-39843

Adobe Acrobat/Reader DC is affected by CVE-2021-39843: an out-of-bounds write that can lead to arbitrary code execution in the context of the current user. Affected are Acrobat Reader DC versions 2021.005.20060 and earlier, 2020.004.30006 and earlier, and 2017.011.30199 and earlier. Exploitation ...

CVE-2021-39842

CVE-2021-39842 is an Adobe Acrobat Reader DC use-after-free vulnerability in messageHandler.OnMessage that could lead to arbitrary code execution in the context of the current user. Exploitation requires user interaction (opening a malicious file). Affected products/versions include Acrobat Reade...

CVE-2021-39842 Adobe Acrobat Reader DC messageHandler.OnMessage Use-After-Free Vulnerability

Acrobat Reader DC versions 2021.005.20060 and earlier, 2020.004.30006 and earlier and 2017.011.30199 and earlier are affected by a use-after-free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in...

CVE-2021-39841 Adobe Acrobat Pro DC DocMedia Type Confusion Remote Code Execution Vulnerability

Acrobat Reader DC versions 2021.005.20060 and earlier, 2020.004.30006 and earlier and 2017.011.30199 and earlier are affected by a Type Confusion vulnerability. An attacker could leverage this vulnerability to execute arbitrary code in the context of the current user. Exploitation of this issue...

CVE-2021-39841

The CVE-2021-39841 entry describes a Type Confusion vulnerability in Adobe Acrobat Reader DC (affected versions: 2021.005.20060 and earlier; 2020.004.30006 and earlier; 2017.011.30199 and earlier) that could allow arbitrary code execution in the context of the current user. Exploitation requires ...

CVE-2021-39838

Adobe Acrobat Reader DC and Acrobat DC are affected by CVE-2021-39838, a use-after-free in the AcroForm buttonGetCaption processing that could result in arbitrary code execution in the context of the current user. Exploitation requires user interaction, with the victim opening a malicious file. A...

CVE-2021-39839

CVE-2021-39839 affects Adobe Acrobat Reader DC and related variants, where a use-after-free in the AcroForm getItem action can lead to arbitrary code execution in the context of the current user. Exploitation requires user interaction (victim opens a malicious file). Affected products/versions in...

CVE-2021-39837 Adobe Acrobat Reader DC AcroForm deleteItemAt Use-After-Free Remote Code Execution Vulnerability

Acrobat Reader DC versions 2021.005.20060 and earlier, 2020.004.30006 and earlier and 2017.011.30199 and earlier are affected by a use-after-free vulnerability in the processing of the AcroForm deleteItemAt action that could result in arbitrary code execution in the context of the current user...

CVE-2021-39837

CVE-2021-39837 affects Adobe Acrobat Reader DC: versions 2021.005.20060 and earlier, 2020.004.30006 and earlier, and 2017.011.30199 and earlier. It is a use-after-free flaw in the processing of the AcroForm deleteItemAt action that can lead to arbitrary code execution in the context of the curren...

CVE-2021-39836 Adobe Acrobat Reader DC AcroForm buttonGetIcon Use-After-Free Remote Code Execution Vulnerability

Acrobat Reader DC versions 2021.005.20060 and earlier, 2020.004.30006 and earlier and 2017.011.30199 and earlier are affected by a use-after-free vulnerability in the processing of the AcroForm buttonGetIcon action that could result in arbitrary code execution in the context of the current user...

CVE-2021-39836

CVE-2021-39836 affects Adobe Acrobat-related products: Acrobat Reader DC versions 2021.005.20060 and earlier, 2020.004.30006 and earlier, and 2017.011.30199 and earlier, with a use-after-free in the AcroForm buttonGetIcon handling that could lead to arbitrary code execution in the context of the ...