CVE-2021-28636: Adobe Acrobat Reader Unquoted Search Path Vulnerability
Acrobat Reader DC versions 2021.005.20054 (and earlier), 2020.004.30005 (and earlier) and 2017.011.30197 (and earlier) are affected by an Uncontrolled Search Path Element vulnerability. An attacker with access to the victim's C:/ folder could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2021-28636?
CVE-2021-28636 has been classified as a critical vulnerability due to its potential to allow attackers to execute arbitrary code.
How do I fix CVE-2021-28636?
To fix CVE-2021-28636, users should update Adobe Acrobat Reader DC to the latest version, which addresses this vulnerability.
What software versions are affected by CVE-2021-28636?
CVE-2021-28636 affects Adobe Acrobat Reader DC versions 2021.005.20054 and earlier, 2020.004.30005 and earlier, and 2017.011.30197 and earlier.
What type of vulnerability is CVE-2021-28636?
CVE-2021-28636 is categorized as an Uncontrolled Search Path Element vulnerability.
Can an attacker exploit CVE-2021-28636 remotely?
No, an attacker would need access to the victim's C:/ folder to exploit CVE-2021-28636.