CVE-2021-21034CWE-125

Acrobat Reader DC Out-Of-Bounds Read Information Disclosure Vulnerability

Medium · published February 11, 2021

CVSS v3.0
4.3
EPSS
3%
Percentile
85.0
In the wild
Unconfirmed
What it is

Acrobat Reader DC versions versions 2020.013.20074 (and earlier), 2020.001.30018 (and earlier) and 2017.011.30188 (and earlier) are affected by an Out-of-bounds Read vulnerability. An unauthenticated attacker could leverage this vulnerability to locally elevate privileges in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

The record
Technical detail
CVSS v3.0
4.3 · MEDIUM
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.02562 · 85.0th percentile
Weakness
CWE-125 · Out-of-bounds Read
Published
2021-02-11T19:42Z
EPSS history
Timeline
  • 11 FEB 19:42Z
    Acrobat Reader DC Out-Of-Bounds Read Information Disclosure Vulnerability
    cvelistv5