CVE-2021-21045
8.2
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H
Summary
Acrobat Reader DC versions versions 2020.013.20074 (and earlier), 2020.001.30018 (and earlier) and 2017.011.30188 (and earlier) are affected by an improper access control vulnerability. An unauthenticated attacker could leverage this vulnerability to elevate privileges in the context of the current user.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| Adobe | Acrobat Reader | unspecified <= 2020.013.20074 | affected |
| Adobe | Acrobat Reader | unspecified <= 2020.001.30018 | affected |
| Adobe | Acrobat Reader | unspecified <= 2017.011.30188 | affected |
| Adobe | Acrobat Reader | unspecified <= None | affected |
Weaknesses
- CWE-284: Improper Access Control (CWE-284)
ADP Enrichment
CVE Program Container
Additional References
CISA ADP Vulnrichment
- SSVC:
- Exploitation: none
- Automatable: no
- Technical Impact: total
References
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.