CVE-2021-39851

Acrobat Reader DC versions 2021.005.20060 and earlier, 2020.004.30006 and earlier and 2017.011.30199 and earlier are affected by a Null pointer dereference vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve an application denial-of-service in the context of th...

CVE-2021-39844

Acrobat Reader DC versions 2021.005.20060 and earlier, 2020.004.30006 and earlier and 2017.011.30199 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of arbitrary memory information in the context of the current user. Exploitation of this issue require...

CVE-2021-39850

Acrobat Reader DC versions 2021.005.20060 and earlier, 2020.004.30006 and earlier and 2017.011.30199 and earlier are affected by a Null pointer dereference vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve an application denial-of-service in the context of th...

CVE-2021-39849

Acrobat Reader DC versions 2021.005.20060 and earlier, 2020.004.30006 and earlier and 2017.011.30199 and earlier are affected by a Null pointer dereference vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve an application denial-of-service in the context of th...

CVE-2021-39842

Acrobat Reader DC versions 2021.005.20060 and earlier, 2020.004.30006 and earlier and 2017.011.30199 and earlier are affected by a use-after-free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in...

CVE-2021-39845

Acrobat Reader DC versions 2021.005.20060 and earlier, 2020.004.30006 and earlier and 2017.011.30199 and earlier are affected by a stack overflow vulnerability due to insecure handling of a crafted PDF file, potentially resulting in memory corruption in the context of the current user. Exploitati...

CVE-2021-39836

Acrobat Reader DC versions 2021.005.20060 and earlier, 2020.004.30006 and earlier and 2017.011.30199 and earlier are affected by a use-after-free vulnerability in the processing of the AcroForm buttonGetIcon action that could result in arbitrary code execution in the context of the current user...

CVE-2021-39836

Acrobat Reader DC versions 2021.005.20060 and earlier, 2020.004.30006 and earlier and 2017.011.30199 and earlier are affected by a use-after-free vulnerability in the processing of the AcroForm buttonGetIcon action that could result in arbitrary code execution in the context of the current user...

CVE-2021-39838

Acrobat Reader DC versions 2021.005.20060 and earlier, 2020.004.30006 and earlier and 2017.011.30199 and earlier are affected by a use-after-free vulnerability in the processing of the AcroForm buttonGetCaption action that could result in arbitrary code execution in the context of the current use...

Design/Logic Flaw

Acrobat Reader DC versions 2021.005.20060 and earlier, 2020.004.30006 and earlier and 2017.011.30199 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of arbitrary memory information in the context of the current user. Exploitation of this issue require...

Design/Logic Flaw

Acrobat Reader DC versions 2021.005.20060 and earlier, 2020.004.30006 and earlier and 2017.011.30199 and earlier are affected by a use-after-free vulnerability in the processing of the AcroForm buttonGetIcon action that could result in arbitrary code execution in the context of the current user...

CVE-2021-39863

CVE-2021-39863 affects Adobe Acrobat Reader DC variants including 2021.005.20060 (and earlier), 2020.004.30006 (and earlier), and 2017.011.30199 (and earlier). The issue is a heap/buffer overflow triggered while parsing a specially crafted PDF, leading to arbitrary code execution in the context o...

CVE-2021-39856

CVE-2021-39856 affects Adobe Acrobat Reader DC ActiveX Control. The vulnerability allows an unauthenticated attacker to obtain NTLMv2 credentials via an information-disclosure flaw in the ActiveX component, with exploitation requiring a user to visit a malicious attacker-controlled webpage. Affec...

CVE-2021-39860

CVE-2021-39860 affects Acrobat Pro DC and related variants (2021.005.20060 and earlier; 2020.004.30006 and earlier; 2017.011.30199 and earlier). The issue is a Null pointer dereference, allowing an unauthenticated attacker to disclose sensitive user memory. Exploitation requires user interaction:...

CVE-2021-39860 Adobe Acrobat Reader DC Search Plugin Null Pointer Dereference

Acrobat Pro DC versions 2021.005.20060 and earlier, 2020.004.30006 and earlier and 2017.011.30199 and earlier are affected by a Null pointer dereference vulnerability. An unauthenticated attacker could leverage this vulnerability to disclose sensitive user memory. Exploitation of this issue...

CVE-2021-39855

CVE-2021-39855 affects Adobe Acrobat Reader DC ActiveX Control: vulnerable versions include 2021.005.20060 and earlier, 2020.004.30006 and earlier, and 2017.011.30199 and earlier. The issue is an information-disclosure vulnerability that could allow an unauthenticated attacker to obtain NTLMv2 cr...

CVE-2021-39849

Adobe Acrobat: CVE-2021-39849 is a Null Pointer Dereference in Acrobat Reader DC (and related Classic/Continuous updates) that can cause an application DoS in the context of the logged-in user. Exploitation requires user interaction (victim opens a malicious file). Affected versions include Acrob...

CVE-2021-39850

CVE-2021-39850 refers to a Null pointer dereference in Adobe Acrobat Reader DC affecting versions 2021.005.20060 (and earlier), 2020.004.30006 (and earlier), and 2017.011.30199 (and earlier). The vulnerability allows an unauthenticated attacker to cause an application denial-of-service in the con...

CVE-2021-39852

CVE-2021-39852 affects Adobe Acrobat Reader DC (versions 2021.005.20060 and earlier, 2020.004.30006 and earlier, 2017.011.30199 and earlier). It is a Null pointer dereference vulnerability that can cause an application denial-of-service in the context of the current user. Exploitation requires us...

CVE-2021-39851

CVE-2021-39851 affects Adobe Acrobat Reader DC (variants listed in the initial document) with a Null Pointer Dereference that can cause an application denial-of-service in the context of the current user. An unauthenticated attacker could trigger this by convincing a victim to open a malicious fi...