CVSS: 7.8EPSS: 0%CPEs: 14EXPL: 0CVE-2021-39841 – Adobe Acrobat Pro DC DocMedia Type Confusion Remote Code Execution Vulnerability
https://notcve.org/view.php?id=CVE-2021-39841
16 Sep 2021 — Acrobat Reader DC versions 2021.005.20060 (and earlier), 2020.004.30006 (and earlier) and 2017.011.30199 (and earlier) are affected by a Type Confusion vulnerability. An attacker could leverage this vulnerability to execute arbitrary code in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Acrobat Reader DC versiones 2021.005.20060 (y anteriores), versiones 2020.004.30006 (y anteriores), y versiones 2017.011.30199 (y anteriore... • https://helpx.adobe.com/security/products/acrobat/apsb21-55.html • CWE-843: Access of Resource Using Incompatible Type ('Type Confusion') •
CVSS: 7.8EPSS: 2%CPEs: 14EXPL: 0CVE-2021-39836 – Adobe Acrobat Reader DC AcroForm buttonGetIcon Use-After-Free Remote Code Execution Vulnerability
https://notcve.org/view.php?id=CVE-2021-39836
16 Sep 2021 — Acrobat Reader DC versions 2021.005.20060 (and earlier), 2020.004.30006 (and earlier) and 2017.011.30199 (and earlier) are affected by a use-after-free vulnerability in the processing of the AcroForm buttonGetIcon action that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Acrobat Reader DC versiones 2021.005.20060 (y anteriores), versiones 2020.004.30006 (y anteriores), y versiones... • https://helpx.adobe.com/security/products/acrobat/apsb21-55.html • CWE-416: Use After Free •
CVSS: 7.8EPSS: 9%CPEs: 14EXPL: 0CVE-2021-39837 – Adobe Acrobat Reader DC AcroForm deleteItemAt Use-After-Free Remote Code Execution Vulnerability
https://notcve.org/view.php?id=CVE-2021-39837
16 Sep 2021 — Acrobat Reader DC versions 2021.005.20060 (and earlier), 2020.004.30006 (and earlier) and 2017.011.30199 (and earlier) are affected by a use-after-free vulnerability in the processing of the AcroForm deleteItemAt action that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Acrobat Reader DC versiones 2021.005.20060 (y anteriores), versiones 2020.004.30006 (y anteriores), y versiones ... • https://helpx.adobe.com/security/products/acrobat/apsb21-55.html • CWE-416: Use After Free •
CVSS: 7.8EPSS: 9%CPEs: 14EXPL: 0CVE-2021-39838 – Adobe Acrobat Reader DC AcroForm buttonGetCaption Use-After-Free Remote Code Execution Vulnerability
https://notcve.org/view.php?id=CVE-2021-39838
16 Sep 2021 — Acrobat Reader DC versions 2021.005.20060 (and earlier), 2020.004.30006 (and earlier) and 2017.011.30199 (and earlier) are affected by a use-after-free vulnerability in the processing of the AcroForm buttonGetCaption action that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Acrobat Reader DC versiones 2021.005.20060 (y anteriores), versiones 2020.004.30006 (y anteriores), y versio... • https://helpx.adobe.com/security/products/acrobat/apsb21-55.html • CWE-416: Use After Free •
CVSS: 7.8EPSS: 9%CPEs: 14EXPL: 0CVE-2021-39839 – Adobe Acrobat Reader DC AcroForm getItemAt Use-After-Free Remote Code Execution Vulnerability
https://notcve.org/view.php?id=CVE-2021-39839
16 Sep 2021 — Acrobat Reader DC versions 2021.005.20060 (and earlier), 2020.004.30006 (and earlier) and 2017.011.30199 (and earlier) are affected by a use-after-free vulnerability in the processing of the AcroForm getItem action that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Acrobat Reader DC versiones 2021.005.20060 (y anteriores), versiones 2020.004.30006 (y anteriores), y versiones 2017.... • https://helpx.adobe.com/security/products/acrobat/apsb21-55.html • CWE-416: Use After Free •
CVSS: 7.8EPSS: 9%CPEs: 14EXPL: 0CVE-2021-39840 – Adobe Acrobat Reader DC AcroForm Field Use-After-Free Remote Code Execution Vulnerability
https://notcve.org/view.php?id=CVE-2021-39840
16 Sep 2021 — Acrobat Reader DC versions 2021.005.20060 (and earlier), 2020.004.30006 (and earlier) and 2017.011.30199 (and earlier) are affected by a use-after-free vulnerability when processing AcroForms that could result in arbitrary code execution in the context of the current user. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. Acrobat Reader DC versiones 2021.005.20060 (y anteriores), versiones 2020.004.30006 (y anteriores), y vers... • https://helpx.adobe.com/security/products/acrobat/apsb21-55.html • CWE-416: Use After Free •
CVSS: 8.8EPSS: 0%CPEs: 12EXPL: 0CVE-2021-28564 – Adobe Acrobat Reader out-of-bounds write vulnerability could lead to arbitrary code execution
https://notcve.org/view.php?id=CVE-2021-28564
02 Sep 2021 — Acrobat Reader DC versions versions 2021.001.20150 (and earlier), 2020.001.30020 (and earlier) and 2017.011.30194 (and earlier) are affected by an Out-of-bounds Write vulnerability within the ImageTool component. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Acrobat Reader DC versiones 2021.001.20150 (y anteriores), versione... • https://helpx.adobe.com/security/products/acrobat/apsb21-29.html • CWE-787: Out-of-bounds Write •
CVSS: 8.8EPSS: 0%CPEs: 12EXPL: 0CVE-2021-28561 – Adobe Acrobat Reader memory corruption vulnerability could lead to remote code execution
https://notcve.org/view.php?id=CVE-2021-28561
02 Sep 2021 — Acrobat Reader DC versions versions 2021.001.20150 (and earlier), 2020.001.30020 (and earlier) and 2017.011.30194 (and earlier) are affected by a memory corruption vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Acrobat Reader DC versiones 2021.001.20150 (y anteriores), versiones 2020.001.30020 (y anteriores) y ... • https://helpx.adobe.com/security/products/acrobat/apsb21-29.html • CWE-787: Out-of-bounds Write •
CVSS: 5.3EPSS: 0%CPEs: 12EXPL: 0CVE-2021-28559 – Adobe Acrobat Reader privacy violation vulnerability could lead to privilege escalation
https://notcve.org/view.php?id=CVE-2021-28559
02 Sep 2021 — Acrobat Reader DC versions versions 2021.001.20150 (and earlier), 2020.001.30020 (and earlier) and 2017.011.30194 (and earlier) are affected by an Information Exposure vulnerability. An unauthenticated attacker could leverage this vulnerability to get access to restricted data stored within global variables and objects. Acrobat Reader DC versiones 2021.001.20150 (y anteriores), versiones 2020.001.30020 (y anteriores) y versiones 2017.011.30194 (y anteriores), están afectadas por una vulnerabilidad de Exposi... • https://helpx.adobe.com/security/products/acrobat/apsb21-29.html • CWE-359: Exposure of Private Personal Information to an Unauthorized Actor •
CVSS: 9.3EPSS: 0%CPEs: 12EXPL: 0CVE-2021-28565 – Adobe Acrobat Reader out-of-bounds read could lead to information exposure
https://notcve.org/view.php?id=CVE-2021-28565
02 Sep 2021 — Acrobat Reader DC versions versions 2021.001.20150 (and earlier), 2020.001.30020 (and earlier) and 2017.011.30194 (and earlier) are affected by an Out-of-bounds Read vulnerability in the PDFLibTool component. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Acrobat Reader DC versiones 2021.001.20150 (y anteriores), versiones 20... • https://helpx.adobe.com/security/products/acrobat/apsb21-29.html • CWE-125: Out-of-bounds Read •