{
  "cveId": "CVE-2021-28550",
  "url": "https://patchblox.com/security/cve/CVE-2021-28550",
  "summary": "CVE-2021-28550 is fixed in Adobe Acrobat Reader DC on 1 platform by Adobe Acrobat Reader DC 21.001.20155 (version 21.001.20155), released April 27, 2021. It is being exploited: CISA added it to the Known Exploited Vulnerabilities catalog on November 3, 2021. Patch Radar priority: Patch now.",
  "title": "Adobe Acrobat and Reader Use-After-Free Vulnerability",
  "description": "Acrobat Reader DC versions versions 2021.001.20150 (and earlier), 2020.001.30020 (and earlier) and 2017.011.30194 (and earlier) are affected by a Use After Free vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.",
  "published": "2021-09-02T17:15:08Z",
  "severity": "",
  "cvss": 8.8,
  "cwe": "CWE-416: Use After Free (CWE-416)",
  "epss": 0.52132,
  "epssPercentile": 0.98966,
  "priority": "Patch now",
  "priorityTier": 1,
  "exploited": true,
  "vendorExploited": true,
  "disclosed": false,
  "kev": {
    "added": "2021-11-03T00:00:00Z",
    "due": "2021-11-17T00:00:00Z",
    "ransomware": false,
    "requiredAction": "Apply updates per vendor instructions."
  },
  "vendorAdvisory": "https://nvd.nist.gov/vuln/detail/CVE-2021-28550",
  "fixes": [
    {
      "platform": "windows-app",
      "product": "Adobe Acrobat Reader DC",
      "fixedVersion": "21.001.20155",
      "fix": "Adobe Acrobat Reader DC 21.001.20155",
      "url": "https://patchblox.com/security/fix/windows-app/adobe.acrobat.reader.32-bit-21.001.20155",
      "released": "2021-04-27T00:00:00Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-08T19:12:23Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}