CVE-2021-39861

Common vulnerabilities & exposures (CVE)

CVE database CVE database blogpost Release & EoL database

Published at: - 29-09-2021 06:15

Last modified: - 05-02-2022 03:17

Total changes: - 4

Description

Acrobat Reader DC versions 2021.005.20060 (and earlier), 2020.004.30006 (and earlier) and 2017.011.30199 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of arbitrary memory information in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Common Vulnerability Scoring System (CVSS)

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Low

Attack complexity

Local

Attack vector

None

Availability

High

Confidentiality

None

Integrity

None

Privileges required

Unchanged

Scope

Required

User interaction

5.5

Base score

1.8

3.6

Exploitability score

Impact score

Verification logic

AND

vendor=adobe AND product=acrobat_dc AND software_edition=continuous AND versionEndIncluding=21.005.20060 AND versionStartIncluding=20.006.20034

vendor=microsoft AND product=windows AND version=-

AND

vendor=adobe AND product=acrobat_dc AND software_edition=continuous AND versionEndIncluding=21.005.20058 AND versionStartIncluding=20.006.20034

vendor=apple AND product=macos AND version=-

AND

vendor=adobe AND product=acrobat_reader_dc AND software_edition=continuous AND versionEndIncluding=21.005.20060 AND versionStartIncluding=20.006.20034

vendor=microsoft AND product=windows AND version=-

AND

vendor=adobe AND product=acrobat_dc AND software_edition=continuous AND versionEndIncluding=21.005.20058 AND versionStartIncluding=20.006.20034

vendor=apple AND product=macos AND version=-

AND

vendor=adobe AND product=acrobat_2017 AND software_edition=classic_2017 AND versionEndIncluding=17.011.30199 AND versionStartIncluding=17.011.30158

vendor=adobe AND product=acrobat_reader_2017 AND software_edition=classic_2017 AND versionEndIncluding=17.011.30199 AND versionStartIncluding=17.011.30158

vendor=apple AND product=macos AND version=-

vendor=microsoft AND product=windows AND version=-

AND

vendor=adobe AND product=acrobat AND software_edition=classic AND versionEndIncluding=20.004.30006 AND versionStartIncluding=20.001.30005

vendor=adobe AND product=acrobat_reader AND software_edition=classic AND versionEndIncluding=20.004.30006 AND versionStartIncluding=20.001.30005

vendor=apple AND product=macos AND version=-

vendor=microsoft AND product=windows AND version=-

Reference

https://helpx.adobe.com/security/products/acrobat/apsb21-55.html

Keywords

CVE-2021-39861

Common vulnerabilities & exposures (CVE)

Description

Common Vulnerability Scoring System (CVSS)

Verification logic

Reference

NVD

CVE-2021-39861

CVE

Common vulnerabilities & exposures

CVSS

Common vulnerability scoring system

Security

Vulnerabilities

Exposures