CVE-2021-21061

LOW

Adobe Acrobat and Acrobat Reader < 17.011.30188, < 20.013.20074 - Use-After-Free via Crafted PDF File

Title source: llm
STIX 2.1

Description

Acrobat Pro DC versions versions 2020.013.20074 (and earlier), 2020.001.30018 (and earlier) and 2017.011.30188 (and earlier) are affected by a Use-after-free vulnerability when parsing a specially crafted PDF file. An unauthenticated attacker could leverage this vulnerability to disclose sensitive information in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

References (1)

Core 1
Core References

Scores

CVSS v3 3.3
EPSS 0.0201
EPSS Percentile 78.4%
Attack Vector LOCAL
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

Details

CWE
CWE-416
Status published
Products (4)
adobe/acrobat 17.0 - 17.011.30188
adobe/acrobat_dc < 20.013.20074
adobe/acrobat_reader 17.0 - 17.011.30188
adobe/acrobat_reader_dc < 20.013.20074
Published Feb 11, 2021
Tracked Since Feb 18, 2026