CVSS: 4.3EPSS: 0%CPEs: 14EXPL: 0CVE-2021-40730 – Adobe Acrobat Reader DC JPEG2000 Parsing Use-After-Free Information Disclosure Vulnerability
https://notcve.org/view.php?id=CVE-2021-40730
14 Oct 2021 — Adobe Acrobat Reader DC version 21.007.20095 (and earlier), 21.007.20096 (and earlier), 20.004.30015 (and earlier), and 17.011.30202 (and earlier) is affected by a use-after-free that allow a remote attacker to disclose sensitive information on affected installations of of Adobe Acrobat Reader DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of JPG2000 images. Adobe Acrobat Read... • https://helpx.adobe.com/security/products/acrobat/apsb21-104.html • CWE-416: Use After Free •
CVSS: 7.8EPSS: 0%CPEs: 14EXPL: 0CVE-2021-40725 – Adobe Acrobat Reader DC AcroForm listbox Use-After-Free Remote Code Execution Vulnerability
https://notcve.org/view.php?id=CVE-2021-40725
07 Oct 2021 — Acrobat Reader DC versions 2021.005.20060 (and earlier), 2020.004.30006 (and earlier) and 2017.011.30199 (and earlier) are affected by a use-after-free vulnerability when processing AcroForm listbox that could result in arbitrary code execution in the context of the current user. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. Acrobat Reader DC versiones 2021.005.20060 (y anteriores), versiones 2020.004.30006 (y anteriores) ... • https://helpx.adobe.com/security/products/acrobat/apsb21-55.html • CWE-416: Use After Free •
CVSS: 7.8EPSS: 0%CPEs: 14EXPL: 0CVE-2021-40726 – Adobe Acrobat Reader DC AcroForm Field Use-After-Free Remote Code Execution Vulnerability
https://notcve.org/view.php?id=CVE-2021-40726
07 Oct 2021 — Acrobat Reader DC versions 2021.005.20060 (and earlier), 2020.004.30006 (and earlier) and 2017.011.30199 (and earlier) are affected by a use-after-free vulnerability when processing AcroForm field that could result in arbitrary code execution in the context of the current user. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. Acrobat Reader DC versiones 2021.005.20060 (y anteriores), versiones 2020.004.30006 (y anteriores) y ... • https://helpx.adobe.com/security/products/acrobat/apsb21-55.html • CWE-416: Use After Free •
CVSS: 7.8EPSS: 0%CPEs: 16EXPL: 2CVE-2021-39863 – Adobe Acrobat Reader DC Heap-based Buffer Overflow Vulnerability Could Lead To Arbitrary Code Execution
https://notcve.org/view.php?id=CVE-2021-39863
29 Sep 2021 — Acrobat Reader DC versions 2021.005.20060 (and earlier), 2020.004.30006 (and earlier) and 2017.011.30199 (and earlier) are affected by a Buffer Overflow vulnerability when parsing a specially crafted PDF file. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Acrobat Reader DC versiones 2021.005.20060 (y anteriores), versiones 2... • https://github.com/lsw29475/CVE-2021-39863 • CWE-122: Heap-based Buffer Overflow •
CVSS: 6.5EPSS: 0%CPEs: 14EXPL: 0CVE-2021-39856 – Adobe Acrobat Reader DC NTLMv2 SSO Information Disclosure via LoadFile
https://notcve.org/view.php?id=CVE-2021-39856
29 Sep 2021 — Acrobat Reader DC ActiveX Control versions 2021.005.20060 (and earlier), 2020.004.30006 (and earlier) and 2017.011.30199 (and earlier) are affected by an Information Disclosure vulnerability. An unauthenticated attacker could leverage this vulnerability to obtain NTLMv2 credentials. Exploitation of this issue requires user interaction in that a victim must visit an attacker controlled web page. Acrobat Reader DC versiones ActiveX Control 2021.005.20060 (y anteriores), versiones 2020.004.30006 (y anteriores)... • https://helpx.adobe.com/security/products/acrobat/apsb21-55.html • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •
CVSS: 5.5EPSS: 0%CPEs: 14EXPL: 0CVE-2021-39860 – Adobe Acrobat Reader DC Search Plugin Null Pointer Dereference
https://notcve.org/view.php?id=CVE-2021-39860
29 Sep 2021 — Acrobat Pro DC versions 2021.005.20060 (and earlier), 2020.004.30006 (and earlier) and 2017.011.30199 (and earlier) are affected by a Null pointer dereference vulnerability. An unauthenticated attacker could leverage this vulnerability to disclose sensitive user memory. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Las versiones 2021.005.20060 (y anteriores), 2020.004.30006 (y anteriores) y 2017.011.30199 (y anteriores) de Acrobat Pro DC están afectadas po... • https://helpx.adobe.com/security/products/acrobat/apsb21-55.html • CWE-476: NULL Pointer Dereference •
CVSS: 5.5EPSS: 0%CPEs: 16EXPL: 0CVE-2021-39854 – Adobe Acrobat Reader DC Null Pointer Dereference Could Lead To Application Denial-of-Service
https://notcve.org/view.php?id=CVE-2021-39854
29 Sep 2021 — Acrobat Reader DC versions 2021.005.20060 (and earlier), 2020.004.30006 (and earlier) and 2017.011.30199 (and earlier) are affected by a Null pointer dereference vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve an application denial-of-service in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Acrobat Reader DC versiones 2021.005.20060 (y anteriores), versiones 2020.004.30006 (y anterior... • https://helpx.adobe.com/security/products/acrobat/apsb21-55.html • CWE-476: NULL Pointer Dereference •
CVSS: 6.5EPSS: 0%CPEs: 14EXPL: 0CVE-2021-39855 – Adobe Acrobat Reader DC NTLMv2 SSO Information Disclosure via src Parameter
https://notcve.org/view.php?id=CVE-2021-39855
29 Sep 2021 — Acrobat Reader DC ActiveX Control versions 2021.005.20060 (and earlier), 2020.004.30006 (and earlier) and 2017.011.30199 (and earlier) are affected by an Information Disclosure vulnerability. An unauthenticated attacker could leverage this vulnerability to obtain NTLMv2 credentials. Exploitation of this issue requires user interaction in that a victim must open a maliciously crafted Microsoft Office file, or visit an attacker controlled web page. Acrobat Reader DC versiones ActiveX Control 2021.005.20060 (y... • https://helpx.adobe.com/security/products/acrobat/apsb21-55.html • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •
CVSS: 5.5EPSS: 0%CPEs: 14EXPL: 0CVE-2021-39849 – Adobe Acrobat Reader DC Null Pointer Dereference Could Lead To Application Denial-of-Service
https://notcve.org/view.php?id=CVE-2021-39849
29 Sep 2021 — Acrobat Reader DC versions 2021.005.20060 (and earlier), 2020.004.30006 (and earlier) and 2017.011.30199 (and earlier) are affected by a Null pointer dereference vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve an application denial-of-service in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Las versiones 2021.005.20060 (y anteriores), 2020.004.30006 (y anteriores) y 2017.011.30199 (y ... • https://helpx.adobe.com/security/products/acrobat/apsb21-55.html • CWE-476: NULL Pointer Dereference •
CVSS: 4.3EPSS: 0%CPEs: 14EXPL: 0CVE-2021-39857 – Adobe Acrobat Reader DC Information Disclosure via ActiveX LoadFile
https://notcve.org/view.php?id=CVE-2021-39857
29 Sep 2021 — Adobe Acrobat Reader DC add-on for Internet Explorer versions 2021.005.20060 (and earlier), 2020.004.30006 (and earlier) and 2017.011.30199 (and earlier) are affected by an Information Disclosure vulnerability. An unauthenticated attacker could leverage this vulnerability to check for existence of local files. Exploitation of this issue requires user interaction in that a victim must visit an attacker controlled web page. El complemento Adobe Acrobat Reader DC para Internet Explorer versiones 2021.005.20060... • https://helpx.adobe.com/security/products/acrobat/apsb21-55.html • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •