Adobe Security Updates — February 2021

Tuesday, 9 February 2021

Vulnerabilities: 48
Critical: 6
High: 27
Zero-days: 0
Public exploit: 3

Exploited 1

Confirmed exploited (CISA KEV, ENISA). "Zero-day" means exploitation was known by the patch day — install these first.

High 8.8
CVE-2021-21017 Exploited Public exploit Acrobat Reader DC Heap-based Buffer Overflow Vulnerability Could Lead To Arbitrary Code Execution
EPSS 86%

Critical 6

Critical 9.1
CVE-2021-21014 Public exploit Magento Commerce Arbitrary Folder Empty Could Lead To Arbitrary Code Execution
EPSS 4.4%
Critical 9.1
CVE-2021-21016 Magento Commerce Unauthorized Data Modification Could Lead to Arbitrary Code Execution
EPSS 4.8%
Critical 9.1
CVE-2021-21018 Magnto Commerce Unauthorized Data Modification Could Lead To Arbitrary Code Execution
EPSS 3.9%
Critical 9.1
CVE-2021-21019 Magento Commerce XML Injection Could Lead To Remote Code Execution
EPSS 3.6%
Critical 9.1
CVE-2021-21024 Magento Commerce Blind SQL Injection Could Lead To Unauthorized Access
EPSS 2.6%
Critical 9.1
CVE-2021-21025 Magento Commerce XML Injection Could Lead To Arbitrary Code Execution
EPSS 3.2%

Public exploit code 1

Not critical and not yet seen exploited, but exploit or proof-of-concept code is public.

Medium 6.5
CVE-2021-21042 Public exploit Acrobat Reader DC Out-Of-Bounds Read Information Disclosure Vulnerability
EPSS 15%

All vulnerabilities 48

Critical6 Show

Critical 9.1
CVE-2021-21014 Public exploit Magento Commerce Arbitrary Folder Empty Could Lead To Arbitrary Code Execution
EPSS 4.4%
Critical 9.1
CVE-2021-21016 Magento Commerce Unauthorized Data Modification Could Lead to Arbitrary Code Execution
EPSS 4.8%
Critical 9.1
CVE-2021-21018 Magnto Commerce Unauthorized Data Modification Could Lead To Arbitrary Code Execution
EPSS 3.9%
Critical 9.1
CVE-2021-21019 Magento Commerce XML Injection Could Lead To Remote Code Execution
EPSS 3.6%
Critical 9.1
CVE-2021-21024 Magento Commerce Blind SQL Injection Could Lead To Unauthorized Access
EPSS 2.6%
Critical 9.1
CVE-2021-21025 Magento Commerce XML Injection Could Lead To Arbitrary Code Execution
EPSS 3.2%

High27 Show

High 8.8
CVE-2021-21017 Exploited Public exploit Acrobat Reader DC Heap-based Buffer Overflow Vulnerability Could Lead To Arbitrary Code Execution
EPSS 86%
High 8.8
CVE-2021-21021 Acrobat Reader DC Use-After-Free Vulnerability Could Lead To Arbitrary Code Execution
EPSS 4.3%
High 8.8
CVE-2021-21028 Acrobat Reader DC Use-After-Free Vulnerability Could Lead To Arbitrary Code Execution
EPSS 4.3%
High 8.8
CVE-2021-21033 Acrobat Reader DC Use-After-Free Vulnerability Could Lead To Arbitrary Code Execution
EPSS 4.3%
High 8.8
CVE-2021-21035 Acrobat Reader DC Use-After-Free Vulnerability Could Lead To Arbitrary Code Execution
EPSS 4.3%
High 8.2
CVE-2021-21045 Acrobat Reader DC Improper Installer Access Control Vulnerability Could Lead To Privilege Escalation
EPSS 1.8%
High 8.1
CVE-2021-21030 Magento Commerce Stored Cross-site Scripting Could Lead To Arbitrary Javascript Execution
EPSS 5.7%
High 8.0
CVE-2021-21015 Magento Commerce Unauthorized Data Modification Could Lead to Arbitrary Code Execution
EPSS 2.9%
High 7.8
CVE-2021-21036 Acrobat Reader DC Integer Overflow Vulnerability Could Lead To Arbitrary Code Execution
EPSS 2.9%
High 7.8
CVE-2021-21037 Acrobat Reader DC Path Traversal Vulnerability Could Lead To Arbitrary Code Execution
EPSS 3.5%
High 7.8
CVE-2021-21038 Acrobat Reader DC Out-Of-Bounds Write Vulnerability Could Lead To Arbitrary Code Execution
EPSS 3.4%
High 7.8
CVE-2021-21039 Acrobat Reader DC Use-After-Free Vulnerability Could Lead To Arbitrary Code Execution
EPSS 3.2%
High 7.8
CVE-2021-21040 Acrobat Reader DC Use-After-Free Vulnerability Could Lead To Arbitrary Code Execution
EPSS 3.2%
High 7.8
CVE-2021-21041 Acrobat Reader DC Use-After-Free Vulnerability Could Lead To Arbitrary Code Execution
EPSS 3.2%
High 7.8
CVE-2021-21044 Acrobat Reader DC Out-Of-Bounds Write Vulnerability Could Lead To Arbitrary Code Execution
EPSS 3.7%
High 7.8
CVE-2021-21047 Adobe Photoshop Out-Of-Bounds Write Vulnerability Could Lead To Remote Code Execution
EPSS 3.2%
High 7.8
CVE-2021-21048 Adobe Photoshop Buffer Overflow Vulnerability Could Lead To Remote Code Execution Vulnerability
EPSS 3.1%
High 7.8
CVE-2021-21049 Adobe Photoshop Out-Of-Bounds Read Vulnerability Could Lead To Remote Code Execution Vulnerability
EPSS 3.6%
High 7.8
CVE-2021-21050 Adobe Photoshop Out-Of-Bounds Read Vulnerability Could Lead To Remote Code Execution Vulnerability
EPSS 3.6%
High 7.8
CVE-2021-21051 Adobe Photoshop Buffer Overflow Vulnerability Could Lead To Remote Code Execution Vulnerability
EPSS 7.7%
High 7.8
CVE-2021-21052 Adobe Animate Out-of-Bounds Write Vulnerability Could Lead To Arbitrary Code Execution
EPSS 4%
High 7.8
CVE-2021-21053 Adobe Illustrator Out-Of-Bounds Write Vulnerability Could Lead To Remote Code Execution
EPSS 2.4%
High 7.8
CVE-2021-21054 Adobe Illustrator Out-Of-Bounds Write Vulnerability Could Lead To Remote Code Execution Vulnerability
EPSS 4.1%
High 7.8
CVE-2021-21058 Acrobat Reader DC Memory Corruption Vulnerability Could Lead to Arbitrary Code Execution
EPSS 2.7%
High 7.8
CVE-2021-21059 Acrobat Reader DC Buffer Overflow Vulnerability Could Lead to Arbitrary Code Execution
EPSS 2.7%
High 7.8
CVE-2021-21062 Acrobat Reader DC Buffer Overflow Vulnerability Could Lead To Arbitrary Code Execution
EPSS 2.7%
High 7.8
CVE-2021-21063 Acrobat Reader DC Buffer Overflow Vulnerability Could Lead to Arbitrary Code Execution
EPSS 2.7%

Medium13 Show

Medium 6.6
CVE-2021-21057 Acrobat Reader DC Invalid Memory Read Due To An Uninitialized Pointer
EPSS 1.1%
Medium 6.5
CVE-2021-21042 Public exploit Acrobat Reader DC Out-Of-Bounds Read Information Disclosure Vulnerability
EPSS 15%
Medium 6.2
CVE-2021-21055 Adobe Dreamweaver Untrusted Search Path Vulnerability Could Lead To Information Disclosure
Medium 5.6
CVE-2021-21031 Magento Commerce Failure To Invalidate User Session Could Lead To Unauthorized Access
EPSS 1.6%
Medium 5.6
CVE-2021-21032 Magento Commerce Failure To Invalidate User Session Could Lead To Unauthorized Access
EPSS 1.5%
Medium 5.3
CVE-2021-21020 Magento Commerce Improper Access Control Vulnerability
EPSS 2.4%
Medium 5.3
CVE-2021-21022 Magento Commerce Incorrect permissions Could Lead To Unauthorized Access
EPSS 2.1%
Medium 5.3
CVE-2021-21026 Magento Commerce Incorrect permissions Could Lead To Unauthorized Access
EPSS 1.7%
Medium 4.8
CVE-2021-21023 Magento Commerce Stored Cross Site Scripting Vulnerability Could Lead To Arbitrary Code Execution
EPSS 1.6%
Medium 4.8
CVE-2021-21029 Magento Commerce Reflected Cross-site Scripting Vulnerability Could Lead To Arbitrary JavaScript Execution
EPSS 85%
Medium 4.6
CVE-2021-21060 Acrobat Pro DC Improper File Parsing Could Lead to Information Disclosure
EPSS 1.6%
Medium 4.3
CVE-2021-21027 Magento Commerce Cross-Site Request Forgery (CSRF) Could Lead To Unauthorized Data Modification
EPSS 1.6%
Medium 4.3
CVE-2021-21034 Acrobat Reader DC Out-Of-Bounds Read Information Disclosure Vulnerability
EPSS 2.6%

Low2 Show

Low 3.3
CVE-2021-21046 Acrobat Reader DC Buffer Overflow Vulnerability Could Lead To Arbitrary Code Execution
EPSS 1.7%
Low 3.3
CVE-2021-21061 Acrobat Pro DC Use-After-Free Vulnerability Could Lead to Information Disclosure
EPSS 2.1%