Skip to content
OpenAdvisories
Medium · 5.5 CVE-2021-39860 EUVD-2021-26217GHSA-fjq9-22v5-hcw9

Adobe Acrobat Reader DC Search Plugin Null Pointer Dereference

Published Sep 29, 2021 · Updated Sep 17, 2024 · Assigned by adobe

Description

Acrobat Pro DC versions 2021.005.20060 (and earlier), 2020.004.30006 (and earlier) and 2017.011.30199 (and earlier) are affected by a Null pointer dereference vulnerability. An unauthenticated attacker could leverage this vulnerability to disclose sensitive user memory. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Affected products

VendorProductAffectedFixed
Adobe Acrobat Reader unspecified – ≤ 2020.004.30006, unspecified – ≤ 2017.011.30199, unspecified – ≤ 2021.005.20060, unspecified – ≤ None —

References