Adobe Acrobat Reader DC version 21.007.20095 (and earlier), 21.007.20096 (and earlier), 20.004.30015 (and earlier), and 17.011.30202 (and earlier) is affected by a use-after-free vulnerability in the processing of the GetURL function on a global object window that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Acrobat | — | — | Mar 28, 2022 | Oct 15, 2021 |
| Adobe Acrobat | — | Upgrade Adobe Acrobat to the latest version | Apr 26, 2024 | Oct 12, 2021 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub