CVE-2021-45064: Adobe Acrobat Reader DC AcroForm Use-After-Free Remote Code Execution Vulnerability
Acrobat Reader DC version 21.007.20099 (and earlier), 20.004.30017 (and earlier) and 17.011.30204 (and earlier) are affected by a use-after-free vulnerability in the processing of Format event actions that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2021-45064?
CVE-2021-45064 has been classified with a critical severity rating due to its potential for arbitrary code execution.
How do I fix CVE-2021-45064?
To fix CVE-2021-45064, update your Adobe Acrobat Reader DC or Adobe Acrobat to the latest version provided by Adobe.
What versions of Adobe products are affected by CVE-2021-45064?
CVE-2021-45064 affects Adobe Acrobat Reader DC version 21.007.20099 and earlier, Adobe Acrobat version 20.004.30017 and earlier, as well as version 17.011.30204 and earlier.
What type of vulnerability is CVE-2021-45064?
CVE-2021-45064 is a use-after-free vulnerability impacting the processing of format event actions.
Can CVE-2021-45064 be exploited remotely?
Yes, CVE-2021-45064 can potentially be exploited to execute arbitrary code in the context of the current user.