CyberSec.Space Logo
返回 CVE 浏览器

CVE-2021-21017

🔥 Known Exploited (CISA KEV)HIGH
8.8
CVSS Severity Score
EPSS Score27.8880%
EPSS Percentile92.41th
Published2021-02-11
Last Modified2025-10-23
Data SourcesNVDCISA KEVFIRST.org EPSS

Vulnerability Description

Acrobat Reader DC versions versions 2020.013.20074 (and earlier), 2020.001.30018 (and earlier) and 2017.011.30188 (and earlier) are affected by a heap-based buffer overflow vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Affected Platforms (CPE)

📦
Adobe

Acrobat

>= 17.0 and <= 17.011.30188>= 20.0 and <= 20.001.30018
📦
Adobe

Acrobat Dc

<= 20.013.20074
📦
Adobe

Acrobat Reader

>= 17.0 and <= 17.011.30188>= 20.0 and <= 20.001.300183
📦
Adobe

Acrobat Reader Dc

<= 20.013.20074

References & Advisories

🔗 https://helpx.adobe.com/security/products/acrobat/apsb21-09.html
🔗 https://helpx.adobe.com/security/products/acrobat/apsb21-09.html
🔗 https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-21017

相關資安分析文章

每日全球网络威胁情报摘要｜2026 年 7 月 21 日

本期威胁情报分析 VMware vCenter、F5 BIG-IP 与 GitLab 关键漏洞安全修补警讯，同时汇总最新医疗与关键基础设施平台遭勒索软件攻击之防御防范措施。

2026-07-21

相关漏洞威胁

CVE-2026-483737.8

Acrobat Reader is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the cont...

CVE-2020-97135.5

Adobe Acrobat and Reader versions 2020.009.20074 and earlier, 2020.001.30002, 2017.011.30171 and earlier, and 2015.006.30523 and e...

CVE-2020-97115.5

Acrobat Reader versions 2020.009.20074, 2020.001.30002, 2017.011.30171, 2015.006.30523 and earlier are affected by an out-of-bound...

CVE-2020-96957.8

Acrobat Reader versions 2020.009.20074, 2020.001.30002, 2017.011.30171, 2015.006.30523 and earlier are affected by an out-of-bound...