CVE-2021-28550: Adobe Acrobat Reader use after free vulnerability could lead to arbitrary code execution
Adobe Acrobat and Reader contains a use-after-free vulnerability that could allow an unauthenticated attacker to achieve code execution in the context of the current user.
Other sources
Acrobat Reader DC versions versions 2021.001.20150 (and earlier), 2020.001.30020 (and earlier) and 2017.011.30194 (and earlier) are affected by a Use After Free vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2021-28550?
CVE-2021-28550 is a Use-After-Free vulnerability in Adobe Acrobat and Reader, which could allow an attacker to execute arbitrary code.
Which versions of Adobe Acrobat and Reader are affected by CVE-2021-28550?
Acrobat Reader DC versions 2021.001.20150 (and earlier), 2020.001.30020 (and earlier), and 2017.011.30194 (and earlier) are affected by this vulnerability.
What is the severity of CVE-2021-28550?
CVE-2021-28550 has a severity rating of 8.8, which is classified as critical.
How can an attacker exploit CVE-2021-28550?
An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user.
Where can I find more information about CVE-2021-28550?
You can find more information about CVE-2021-28550 on the Adobe Security Bulletin APSB21-29.