CVE-2021-45067: Adobe Acrobat Reader Memory Corruption could lead to Information Disclosure
Acrobat Reader DC version 21.007.20099 (and earlier), 20.004.30017 (and earlier) and 17.011.30204 (and earlier) are affected by an Access of Memory Location After End of Buffer vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2021-45067?
CVE-2021-45067 is rated as a critical vulnerability due to its potential to disclose sensitive memory data.
How do I fix CVE-2021-45067?
To fix CVE-2021-45067, ensure that Adobe Acrobat Reader DC and Acrobat are updated to their latest versions.
Which versions of Adobe Acrobat are affected by CVE-2021-45067?
CVE-2021-45067 affects Adobe Acrobat Reader DC versions up to 21.007.20099, Acrobat versions up to 20.004.30017, and Acrobat Reader versions up to 17.011.30204.
What types of attacks can exploit CVE-2021-45067?
CVE-2021-45067 can be exploited by an attacker to potentially disclose sensitive information from memory.
What should organizations do in response to CVE-2021-45067?
Organizations should prioritize updating affected versions of Adobe Acrobat software to mitigate the risks associated with CVE-2021-45067.