Adobe Acrobat Reader Dc vulnerabilities

1,779 known vulnerabilities affecting adobe/acrobat_reader_dc.

Total CVEs
1,779
CISA KEV
7
actively exploited
Public exploits
26
Exploited in wild
5
Severity breakdown
CRITICAL449HIGH847MEDIUM451LOW32

Vulnerabilities

Page 18 of 89
CVE-2021-39861MEDIUMCVSS 5.5≥ 20.006.20034, ≤ 21.005.200602021-09-29
CVE-2021-39861 [MEDIUM] CWE-125 CVE-2021-39861: Acrobat Reader DC versions 2021.005.20060 (and earlier), 2020.004.30006 (and earlier) and 2017.011.3 Acrobat Reader DC versions 2021.005.20060 (and earlier), 2020.004.30006 (and earlier) and 2017.011.30199 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of arbitrary memory information in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a
nvd
CVE-2021-39856MEDIUMCVSS 6.5≥ 15.008.20082, ≤ 21.005.20058≥ 15.008.20082, ≤ 21.005.200602021-09-29
CVE-2021-39856 [MEDIUM] CWE-200 CVE-2021-39856: Acrobat Reader DC ActiveX Control versions 2021.005.20060 (and earlier), 2020.004.30006 (and earlier Acrobat Reader DC ActiveX Control versions 2021.005.20060 (and earlier), 2020.004.30006 (and earlier) and 2017.011.30199 (and earlier) are affected by an Information Disclosure vulnerability. An unauthenticated attacker could leverage this vulnerability to obtain NTLMv2 credentials. Exploitation of this issue requires user interaction in that a vict
nvd
CVE-2021-39850MEDIUMCVSS 5.5≥ 15.008.20082, ≤ 21.005.20058≥ 15.008.20082, ≤ 21.005.200602021-09-29
CVE-2021-39850 [MEDIUM] CWE-476 CVE-2021-39850: Acrobat Reader DC versions 2021.005.20060 (and earlier), 2020.004.30006 (and earlier) and 2017.011.3 Acrobat Reader DC versions 2021.005.20060 (and earlier), 2020.004.30006 (and earlier) and 2017.011.30199 (and earlier) are affected by a Null pointer dereference vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve an application denial-of-service in the context of the current user. Exploitation of this issue requi
nvd
CVE-2021-39844LOWCVSS 3.3≥ 15.008.20082, ≤ 21.005.20058≥ 15.008.20082, ≤ 21.005.200602021-09-29
CVE-2021-39844 [LOW] CWE-125 CVE-2021-39844: Acrobat Reader DC versions 2021.005.20060 (and earlier), 2020.004.30006 (and earlier) and 2017.011.3 Acrobat Reader DC versions 2021.005.20060 (and earlier), 2020.004.30006 (and earlier) and 2017.011.30199 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of arbitrary memory information in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a mal
nvd
CVE-2021-39858LOWCVSS 3.3≥ 20.006.20034, ≤ 21.005.200602021-09-29
CVE-2021-39858 [LOW] CWE-125 CVE-2021-39858: Acrobat Reader DC versions 2021.005.20060 (and earlier), 2020.004.30006 (and earlier) and 2017.011.3 Acrobat Reader DC versions 2021.005.20060 (and earlier), 2020.004.30006 (and earlier) and 2017.011.30199 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of arbitrary memory information in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a mal
nvd
CVE-2021-28564HIGHCVSS 8.8≥ 15.008.20082, ≤ 21.001.201502021-09-02
CVE-2021-28564 [HIGH] CWE-787 CVE-2021-28564: Acrobat Reader DC versions versions 2021.001.20150 (and earlier), 2020.001.30020 (and earlier) and 2 Acrobat Reader DC versions versions 2021.001.20150 (and earlier), 2020.001.30020 (and earlier) and 2017.011.30194 (and earlier) are affected by an Out-of-bounds Write vulnerability within the ImageTool component. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploi
nvd
CVE-2021-21086HIGHCVSS 7.8≥ 20.006.20042, ≤ 20.013.200742021-09-02
CVE-2021-21086 [HIGH] CWE-787 CVE-2021-21086: Acrobat Reader DC versions versions 2020.013.20074 (and earlier), 2020.001.30018 (and earlier) and 2 Acrobat Reader DC versions versions 2020.013.20074 (and earlier), 2020.001.30018 (and earlier) and 2017.011.30188 (and earlier) are affected by an Out-of-bounds Write vulnerability in the CoolType library. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation
nvd
CVE-2021-28560HIGHCVSS 8.8≥ 15.008.20082, ≤ 21.001.201502021-09-02
CVE-2021-28560 [HIGH] CWE-122 CVE-2021-28560: Acrobat Reader DC versions versions 2021.001.20150 (and earlier), 2020.001.30020 (and earlier) and 2 Acrobat Reader DC versions versions 2021.001.20150 (and earlier), 2020.001.30020 (and earlier) and 2017.011.30194 (and earlier) are affected by a Heap-based Buffer Overflow vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requ
nvd
CVE-2021-28565HIGHCVSS 8.8≥ 15.008.20082, ≤ 21.001.201502021-09-02
CVE-2021-28565 [HIGH] CWE-125 CVE-2021-28565: Acrobat Reader DC versions versions 2021.001.20150 (and earlier), 2020.001.30020 (and earlier) and 2 Acrobat Reader DC versions versions 2021.001.20150 (and earlier), 2020.001.30020 (and earlier) and 2017.011.30194 (and earlier) are affected by an Out-of-bounds Read vulnerability in the PDFLibTool component. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitati
nvd
CVE-2021-28550HIGHCVSS 8.8KEV≥ 15.008.20082, ≤ 21.001.20150≥ 15.008.20082, ≤ 21.001.201492021-09-02
CVE-2021-28550 [HIGH] CWE-416 CVE-2021-28550: Acrobat Reader DC versions versions 2021.001.20150 (and earlier), 2020.001.30020 (and earlier) and 2 Acrobat Reader DC versions versions 2021.001.20150 (and earlier), 2020.001.30020 (and earlier) and 2017.011.30194 (and earlier) are affected by a Use After Free vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires user in
nvd
CVE-2021-28553HIGHCVSS 8.8≥ 15.008.20082, ≤ 21.001.201502021-09-02
CVE-2021-28553 [HIGH] CWE-416 CVE-2021-28553: Acrobat Reader DC versions versions 2021.001.20150 (and earlier), 2020.001.30020 (and earlier) and 2 Acrobat Reader DC versions versions 2021.001.20150 (and earlier), 2020.001.30020 (and earlier) and 2017.011.30194 (and earlier) are affected by an Use After Free vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires user i
nvd
CVE-2021-28561HIGHCVSS 8.8≥ 15.008.20082, ≤ 21.001.201502021-09-02
CVE-2021-28561 [HIGH] CWE-787 CVE-2021-28561: Acrobat Reader DC versions versions 2021.001.20150 (and earlier), 2020.001.30020 (and earlier) and 2 Acrobat Reader DC versions versions 2021.001.20150 (and earlier), 2020.001.30020 (and earlier) and 2017.011.30194 (and earlier) are affected by a memory corruption vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires user
nvd
CVE-2021-28558HIGHCVSS 8.8≥ 15.008.20082, ≤ 21.001.201502021-09-02
CVE-2021-28558 [HIGH] CWE-122 CVE-2021-28558: Acrobat Reader DC versions versions 2021.001.20150 (and earlier), 2020.001.30020 (and earlier) and 2 Acrobat Reader DC versions versions 2021.001.20150 (and earlier), 2020.001.30020 (and earlier) and 2017.011.30194 (and earlier) are affected by an Heap-based buffer overflow vulnerability in the PDFLibTool component. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Ex
nvd
CVE-2021-28559MEDIUMCVSS 5.3≥ 15.008.20082, ≤ 21.001.201502021-09-02
CVE-2021-28559 [MEDIUM] CWE-359 CVE-2021-28559: Acrobat Reader DC versions versions 2021.001.20150 (and earlier), 2020.001.30020 (and earlier) and 2 Acrobat Reader DC versions versions 2021.001.20150 (and earlier), 2020.001.30020 (and earlier) and 2017.011.30194 (and earlier) are affected by an Information Exposure vulnerability. An unauthenticated attacker could leverage this vulnerability to get access to restricted data stored within global variables and objects.
nvd
CVE-2021-28555MEDIUMCVSS 6.5≥ 15.008.20082, ≤ 21.001.201502021-09-02
CVE-2021-28555 [MEDIUM] CWE-125 CVE-2021-28555: Acrobat Reader DC versions versions 2021.001.20150 (and earlier), 2020.001.30020 (and earlier) and 2 Acrobat Reader DC versions versions 2021.001.20150 (and earlier), 2020.001.30020 (and earlier) and 2017.011.30194 (and earlier) are affected by an Out-of-bounds Read vulnerability. An unauthenticated attacker could leverage this vulnerability to get access to sensitive information in the context of the current user. Exploitation of this issue requir
nvd
CVE-2021-28557MEDIUMCVSS 4.3≥ 15.008.20082, ≤ 21.001.201502021-09-02
CVE-2021-28557 [MEDIUM] CWE-125 CVE-2021-28557: Acrobat Reader DC versions versions 2021.001.20150 (and earlier), 2020.001.30020 (and earlier) and 2 Acrobat Reader DC versions versions 2021.001.20150 (and earlier), 2020.001.30020 (and earlier) and 2017.011.30194 (and earlier) are affected by an Out-of-bounds Read vulnerability. An unauthenticated attacker could leverage this vulnerability to leak sensitive system information in the context of the current user. Exploitation of this issue requires
nvd
CVE-2021-28551HIGHCVSS 7.8≥ 15.008.20082, ≤ 21.001.20150≥ 15.008.20082, ≤ 21.001.201492021-08-24
CVE-2021-28551 [HIGH] CWE-125 CVE-2021-28551: Acrobat Reader DC versions versions 2021.001.20155 (and earlier), 2020.001.30025 (and earlier) and 2 Acrobat Reader DC versions versions 2021.001.20155 (and earlier), 2020.001.30025 (and earlier) and 2017.011.30196 (and earlier) are affected by an Out-of-bounds read vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires us
nvd
CVE-2021-28552HIGHCVSS 7.8≥ 15.008.20082, ≤ 21.001.201552021-08-24
CVE-2021-28552 [HIGH] CWE-416 CVE-2021-28552: Acrobat Reader DC versions versions 2021.001.20155 (and earlier), 2020.001.30025 (and earlier) and 2 Acrobat Reader DC versions versions 2021.001.20155 (and earlier), 2020.001.30025 (and earlier) and 2017.011.30196 (and earlier) are affected by an Use After Free vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires user i
nvd
CVE-2021-28631HIGHCVSS 7.8≥ 15.008.20082, ≤ 21.001.201552021-08-24
CVE-2021-28631 [HIGH] CWE-416 CVE-2021-28631: Acrobat Reader DC versions versions 2021.001.20155 (and earlier), 2020.001.30025 (and earlier) and 2 Acrobat Reader DC versions versions 2021.001.20155 (and earlier), 2020.001.30025 (and earlier) and 2017.011.30196 (and earlier) are affected by an Use After Free vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires user i
nvd
CVE-2021-28554HIGHCVSS 7.8≥ 15.008.20082, ≤ 21.001.201552021-08-24
CVE-2021-28554 [HIGH] CWE-125 CVE-2021-28554: Acrobat Reader DC versions versions 2021.001.20155 (and earlier), 2020.001.30025 (and earlier) and 2 Acrobat Reader DC versions versions 2021.001.20155 (and earlier), 2020.001.30025 (and earlier) and 2017.011.30196 (and earlier) are affected by an Out-of-bounds Read vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires us
nvd
← Previous18 / 89Next →