CVE-2021-28634

HIGH

8.2

Description

Acrobat Reader DC versions 2021.005.20054 (and earlier), 2020.004.30005 (and earlier) and 2017.011.30197 (and earlier) are affected by an Improper Neutralization of Special Elements used in an OS Command. An authenticated attacker could leverage this vulnerability to achieve arbitrary code execution on the host machine in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVE Details

CVSS v3.1 Score8.2

SeverityHIGH

CVSS VectorCVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H

Attack VectorLOCAL

ComplexityLOW

Privileges RequiredLOW

User InteractionREQUIRED

Published8/20/2021

Last Modified11/21/2024

Sourcenvd

Honeypot Sightings0

Affected Products

adobe:acrobat_dcadobe:acrobat_reader_dc

Weaknesses (CWE)

CWE-78

References

https://helpx.adobe.com/security/products/acrobat/apsb21-51.html(psirt@adobe.com)

https://helpx.adobe.com/security/products/acrobat/apsb21-51.html(af854a3a-2127-422b-91ae-364da2661108)

IOC Correlations

No correlations recorded

This product uses data from the NVD API but is not endorsed or certified by the NVD.