CVSS: 4.3EPSS: 0%CPEs: 14EXPL: 0CVE-2021-40729 – Adobe Acrobat Reader DC PDF Out-of-Bound Read Vulnerability Information Disclosure
https://notcve.org/view.php?id=CVE-2021-40729
15 Oct 2021 — Adobe Acrobat Reader DC version 21.007.20095 (and earlier), 21.007.20096 (and earlier), 20.004.30015 (and earlier), and 17.011.30202 (and earlier) is affected by a out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious PDF file. Adobe Acrobat Reader DC versiones 21.007.20095 (y anteriores), 21.007.20096 (y a... • https://helpx.adobe.com/security/products/acrobat/apsb21-104.html • CWE-125: Out-of-bounds Read •
CVSS: 4.3EPSS: 1%CPEs: 14EXPL: 0CVE-2021-40730 – Adobe Acrobat Reader DC JPEG2000 Parsing Use-After-Free Information Disclosure Vulnerability
https://notcve.org/view.php?id=CVE-2021-40730
14 Oct 2021 — Adobe Acrobat Reader DC version 21.007.20095 (and earlier), 21.007.20096 (and earlier), 20.004.30015 (and earlier), and 17.011.30202 (and earlier) is affected by a use-after-free that allow a remote attacker to disclose sensitive information on affected installations of of Adobe Acrobat Reader DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of JPG2000 images. Adobe Acrobat Read... • https://helpx.adobe.com/security/products/acrobat/apsb21-104.html • CWE-416: Use After Free •
CVSS: 7.8EPSS: 6%CPEs: 14EXPL: 0CVE-2021-40731 – Adobe Acrobat Reader DC JPEG2000 Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
https://notcve.org/view.php?id=CVE-2021-40731
14 Oct 2021 — Adobe Acrobat Reader DC version 21.007.20095 (and earlier), 21.007.20096 (and earlier), 20.004.30015 (and earlier), and 17.011.30202 (and earlier) is affected by an out-of-bounds write vulnerability when parsing a crafted JPEG2000 file, which could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Adobe Acrobat Reader DC versión 21.007.20095 (y anteriores), 21.007.20096 (y anteriores), 20.0... • https://helpx.adobe.com/security/products/acrobat/apsb21-104.html • CWE-787: Out-of-bounds Write •
CVSS: 6.5EPSS: 2%CPEs: 14EXPL: 0CVE-2021-39856 – Adobe Acrobat Reader DC NTLMv2 SSO Information Disclosure via LoadFile
https://notcve.org/view.php?id=CVE-2021-39856
29 Sep 2021 — Acrobat Reader DC ActiveX Control versions 2021.005.20060 (and earlier), 2020.004.30006 (and earlier) and 2017.011.30199 (and earlier) are affected by an Information Disclosure vulnerability. An unauthenticated attacker could leverage this vulnerability to obtain NTLMv2 credentials. Exploitation of this issue requires user interaction in that a victim must visit an attacker controlled web page. Acrobat Reader DC versiones ActiveX Control 2021.005.20060 (y anteriores), versiones 2020.004.30006 (y anteriores)... • https://helpx.adobe.com/security/products/acrobat/apsb21-55.html • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •
CVSS: 5.5EPSS: 1%CPEs: 14EXPL: 0CVE-2021-39860 – Adobe Acrobat Reader DC Search Plugin Null Pointer Dereference
https://notcve.org/view.php?id=CVE-2021-39860
29 Sep 2021 — Acrobat Pro DC versions 2021.005.20060 (and earlier), 2020.004.30006 (and earlier) and 2017.011.30199 (and earlier) are affected by a Null pointer dereference vulnerability. An unauthenticated attacker could leverage this vulnerability to disclose sensitive user memory. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Las versiones 2021.005.20060 (y anteriores), 2020.004.30006 (y anteriores) y 2017.011.30199 (y anteriores) de Acrobat Pro DC están afectadas po... • https://helpx.adobe.com/security/products/acrobat/apsb21-55.html • CWE-476: NULL Pointer Dereference •
CVSS: 5.5EPSS: 1%CPEs: 16EXPL: 0CVE-2021-39854 – Adobe Acrobat Reader DC Null Pointer Dereference Could Lead To Application Denial-of-Service
https://notcve.org/view.php?id=CVE-2021-39854
29 Sep 2021 — Acrobat Reader DC versions 2021.005.20060 (and earlier), 2020.004.30006 (and earlier) and 2017.011.30199 (and earlier) are affected by a Null pointer dereference vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve an application denial-of-service in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Acrobat Reader DC versiones 2021.005.20060 (y anteriores), versiones 2020.004.30006 (y anterior... • https://helpx.adobe.com/security/products/acrobat/apsb21-55.html • CWE-476: NULL Pointer Dereference •
CVSS: 6.5EPSS: 2%CPEs: 14EXPL: 0CVE-2021-39855 – Adobe Acrobat Reader DC NTLMv2 SSO Information Disclosure via src Parameter
https://notcve.org/view.php?id=CVE-2021-39855
29 Sep 2021 — Acrobat Reader DC ActiveX Control versions 2021.005.20060 (and earlier), 2020.004.30006 (and earlier) and 2017.011.30199 (and earlier) are affected by an Information Disclosure vulnerability. An unauthenticated attacker could leverage this vulnerability to obtain NTLMv2 credentials. Exploitation of this issue requires user interaction in that a victim must open a maliciously crafted Microsoft Office file, or visit an attacker controlled web page. Acrobat Reader DC versiones ActiveX Control 2021.005.20060 (y... • https://helpx.adobe.com/security/products/acrobat/apsb21-55.html • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •
CVSS: 5.5EPSS: 1%CPEs: 14EXPL: 0CVE-2021-39849 – Adobe Acrobat Reader DC Null Pointer Dereference Could Lead To Application Denial-of-Service
https://notcve.org/view.php?id=CVE-2021-39849
29 Sep 2021 — Acrobat Reader DC versions 2021.005.20060 (and earlier), 2020.004.30006 (and earlier) and 2017.011.30199 (and earlier) are affected by a Null pointer dereference vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve an application denial-of-service in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Las versiones 2021.005.20060 (y anteriores), 2020.004.30006 (y anteriores) y 2017.011.30199 (y ... • https://helpx.adobe.com/security/products/acrobat/apsb21-55.html • CWE-476: NULL Pointer Dereference •
CVSS: 4.3EPSS: 1%CPEs: 14EXPL: 0CVE-2021-39857 – Adobe Acrobat Reader DC Information Disclosure via ActiveX LoadFile
https://notcve.org/view.php?id=CVE-2021-39857
29 Sep 2021 — Adobe Acrobat Reader DC add-on for Internet Explorer versions 2021.005.20060 (and earlier), 2020.004.30006 (and earlier) and 2017.011.30199 (and earlier) are affected by an Information Disclosure vulnerability. An unauthenticated attacker could leverage this vulnerability to check for existence of local files. Exploitation of this issue requires user interaction in that a victim must visit an attacker controlled web page. El complemento Adobe Acrobat Reader DC para Internet Explorer versiones 2021.005.20060... • https://helpx.adobe.com/security/products/acrobat/apsb21-55.html • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •
CVSS: 5.5EPSS: 1%CPEs: 14EXPL: 0CVE-2021-39850 – Adobe Acrobat Reader DC Null Pointer Dereference Could Lead To Application Denial-of-Service
https://notcve.org/view.php?id=CVE-2021-39850
29 Sep 2021 — Acrobat Reader DC versions 2021.005.20060 (and earlier), 2020.004.30006 (and earlier) and 2017.011.30199 (and earlier) are affected by a Null pointer dereference vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve an application denial-of-service in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Las versiones 2021.005.20060 (y anteriores), 2020.004.30006 (y anteriores) y 2017.011.30199 (y ... • https://helpx.adobe.com/security/products/acrobat/apsb21-55.html • CWE-476: NULL Pointer Dereference •