CVE-2021-28559CWE-359

Adobe Acrobat Reader privacy violation vulnerability could lead to privilege escalation

Medium · published September 2, 2021

CVSS v3.1
5.3
EPSS
2%
Percentile
76.3
In the wild
Unconfirmed
What it is

Acrobat Reader DC versions versions 2021.001.20150 (and earlier), 2020.001.30020 (and earlier) and 2017.011.30194 (and earlier) are affected by an Information Exposure vulnerability. An unauthenticated attacker could leverage this vulnerability to get access to restricted data stored within global variables and objects.

The record
Technical detail
CVSS v3.1
5.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.01646 · 76.3th percentile
Weakness
CWE-359 · Exposure of Private Personal Information to an Unauthorized Actor
Published
2021-09-02T16:08Z
EPSS history
Timeline
  • 02 SEP 16:08Z
    Adobe Acrobat Reader privacy violation vulnerability could lead to privilege escalation
    cvelistv5