CVE-2021-28635: Adobe Acrobat Reader Use-After-Free Vulnerability
Acrobat Reader DC versions 2021.005.20054 (and earlier), 2020.004.30005 (and earlier) and 2017.011.30197 (and earlier) are affected by a use-after-free vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Affected Software
Remediation
Event History
Frequently Asked Questions
What versions of Adobe Acrobat DC are affected by CVE-2021-28635?
CVE-2021-28635 affects Adobe Acrobat DC versions 2021.005.20054 and earlier, 2020.004.30005 and earlier, and 2017.011.30197 and earlier.
What is the impact of CVE-2021-28635?
CVE-2021-28635 allows an unauthenticated attacker to achieve arbitrary code execution through a use-after-free vulnerability.
How can I mitigate CVE-2021-28635?
To mitigate CVE-2021-28635, it is recommended to upgrade to the latest version of Adobe Acrobat DC released after 2021.005.20054.
Is there a workaround for CVE-2021-28635?
Currently, there are no known workarounds for CVE-2021-28635, so updating to a fixed version is the best approach.
How critical is the CVE-2021-28635 vulnerability?
CVE-2021-28635 is considered critical due to its potential to allow arbitrary code execution.