CVE-2021-39861: Adobe Acrobat Reader DC Catalog Plugin Out-of-Bounds Read Bug
Acrobat Reader DC versions 2021.005.20060 (and earlier), 2020.004.30006 (and earlier) and 2017.011.30199 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of arbitrary memory information in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID of this Adobe Acrobat Reader vulnerability?
The vulnerability ID is CVE-2021-39861.
Which versions of Acrobat Reader DC are affected by this vulnerability?
Acrobat Reader DC versions 2021.005.20060 (and earlier), 2020.004.30006 (and earlier), and 2017.011.30199 (and earlier) are affected by this vulnerability.
What is the severity rating of CVE-2021-39861?
The severity rating of CVE-2021-39861 is 5.5 (medium).
How can this vulnerability be exploited?
This vulnerability can be exploited to lead to the disclosure of arbitrary memory information in the context of the current user.
Where can I find more information about this vulnerability?
You can find more information about this vulnerability at the following reference link: [Adobe Security Bulletin APSB21-55](https://helpx.adobe.com/security/products/acrobat/apsb21-55.html).