{
  "cveId": "CVE-2021-28559",
  "url": "https://patchblox.com/security/cve/CVE-2021-28559",
  "summary": "CVE-2021-28559 is fixed in Adobe Acrobat Reader DC on 1 platform by Adobe Acrobat Reader DC 21.001.20155 (version 21.001.20155), released April 27, 2021. It is not reported as exploited. Patch Radar priority: Routine.",
  "title": "Adobe Acrobat Reader privacy violation vulnerability could lead to privilege escalation",
  "description": "Acrobat Reader DC versions versions 2021.001.20150 (and earlier), 2020.001.30020 (and earlier) and 2017.011.30194 (and earlier) are affected by an Information Exposure vulnerability. An unauthenticated attacker could leverage this vulnerability to get access to restricted data stored within global variables and objects.",
  "published": "2021-09-02T17:15:08Z",
  "severity": "",
  "cvss": 5.3,
  "cwe": "CWE-359: Exposure of Private Information (\u0027Privacy Violation\u0027) (CWE-359)",
  "epss": 0.01646,
  "epssPercentile": 0.76619,
  "priority": "Routine",
  "priorityTier": 4,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "vendorAdvisory": "https://nvd.nist.gov/vuln/detail/CVE-2021-28559",
  "fixes": [
    {
      "platform": "windows-app",
      "product": "Adobe Acrobat Reader DC",
      "fixedVersion": "21.001.20155",
      "fix": "Adobe Acrobat Reader DC 21.001.20155",
      "url": "https://patchblox.com/security/fix/windows-app/adobe.acrobat.reader.32-bit-21.001.20155",
      "released": "2021-04-27T00:00:00Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-08T19:12:23Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}