CVE-2021-44701: Adobe Acrobat Reader DC AcroForm Use-After-Free Remote Code Execution Vulnerability
Acrobat Reader DC version 21.007.20099 (and earlier), 20.004.30017 (and earlier) and 17.011.30204 (and earlier) are affected by a use-after-free vulnerability in the processing of Format event actions that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2021-44701?
CVE-2021-44701 has a critical severity rating due to the potential for arbitrary code execution.
How do I fix CVE-2021-44701?
To fix CVE-2021-44701, upgrade Adobe Acrobat Reader DC to version 21.007.20102 or later, or upgrade to newer versions of affected Acrobat products.
What software is affected by CVE-2021-44701?
CVE-2021-44701 affects Adobe Acrobat Reader DC versions 21.007.20099 and earlier, as well as versions 20.004.30017 and earlier, and 17.011.30204 and earlier.
What type of vulnerability is CVE-2021-44701?
CVE-2021-44701 is a use-after-free vulnerability that arises during the processing of Format event actions.
What are the potential impacts of CVE-2021-44701?
The potential impact of CVE-2021-44701 includes arbitrary code execution within the context of the current user.