CVE-2021-35982: Adobe Reader DC Windows Installer Uncontrolled Search Path element could lead to Arbitrary Code Execution
Acrobat Reader DC versions 2021.005.20060 (and earlier), 2020.004.30006 (and earlier) and 2017.011.30199 (and earlier) are affected by an Uncontrolled Search Path Element vulnerability. A local attacker with non-administrative privileges can plant a malicious DLL to achieve arbitrary code execution in the context of the current user via DLL hijacking. Exploitation of this issue requires user interaction.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2021-35982?
CVE-2021-35982 is classified as a high-severity vulnerability due to its potential for arbitrary code execution.
How do I fix CVE-2021-35982?
To mitigate CVE-2021-35982, users should update Adobe Acrobat Reader DC to the latest version that is not affected by this vulnerability.
Which versions of Adobe Acrobat Reader DC are affected by CVE-2021-35982?
CVE-2021-35982 affects Adobe Acrobat Reader DC versions 2021.005.20060 and earlier, 2020.004.30006 and earlier, and 2017.011.30199 and earlier.
What type of vulnerability is CVE-2021-35982?
CVE-2021-35982 is an Uncontrolled Search Path Element vulnerability that allows local attackers to execute arbitrary code.
Can non-administrative users exploit CVE-2021-35982?
Yes, non-administrative users can exploit CVE-2021-35982 by planting a malicious DLL.