CVE-2021-28550
Known Exploited (CISA KEV)HIGH
8.8
CVSS Severity Score
Vulnerability Description
Acrobat Reader DC versions versions 2021.001.20150 (and earlier), 2020.001.30020 (and earlier) and 2017.011.30194 (and earlier) are affected by a Use After Free vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Affected Platforms (CPE)
📦
Adobe
Acrobat Dc
>= 15.008.20082 and <= 21.001.20150📦
Adobe
Acrobat Reader Dc
>= 15.008.20082 and <= 21.001.20150📦
Adobe
Acrobat
>= 17.011.30059 and <= 17.011.30194📦
Adobe
Acrobat
>= 20.001.30005 and <= 20.001.30020📦
Adobe
Acrobat Reader
>= 17.011.30059 and <= 17.011.30194📦
Adobe
Acrobat Reader
>= 20.001.30005 and <= 20.001.30020📦
Adobe
Acrobat Dc
>= 15.008.20082 and <= 21.001.20149📦
Adobe