CVE-2021-39838: Adobe Acrobat Reader DC AcroForm buttonGetCaption Use-After-Free Remote Code Execution Vulnerability
Acrobat Reader DC versions 2021.005.20060 (and earlier), 2020.004.30006 (and earlier) and 2017.011.30199 (and earlier) are affected by a use-after-free vulnerability in the processing of the AcroForm buttonGetCaption action that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2021-39838?
CVE-2021-39838 is rated as critical due to its potential for arbitrary code execution.
How do I fix CVE-2021-39838?
To address CVE-2021-39838, update Adobe Acrobat Reader DC to the latest version available.
Which versions of Adobe Acrobat are affected by CVE-2021-39838?
CVE-2021-39838 impacts Acrobat Reader DC versions 2021.005.20060 and earlier, 2020.004.30006 and earlier, and 2017.011.30199 and earlier.
Is CVE-2021-39838 exploitable on MacOS?
CVE-2021-39838 is specific to Adobe software and does not apply if running on MacOS without affected applications.
What are the potential consequences of CVE-2021-39838?
Exploitation of CVE-2021-39838 could result in arbitrary code execution, leading to system compromise.