# Adobe Acrobat Reader DC 21.001.20155 Adobe Acrobat Reader DC 21.001.20155, released April 27, 2021, fixes 56 CVEs in Adobe Acrobat Reader DC. 2 of them are being exploited (CVE-2021-21017); 2 on CISA KEV. Patch Radar priority: Patch now. The latest Adobe Acrobat Reader DC is 26.002.22031, which also fixes every one of these CVEs. - Web page: https://patchblox.com/security/fix/windows-app/adobe.acrobat.reader.32-bit-21.001.20155 - Platform: Windows apps - Released: Apr 27, 2021 - Priority: Patch now (Closes CVE-2021-21017, exploited (CISA KEV)) - CVEs: 56, exploited: 2, on CISA KEV: 2 - Superseded by: [Adobe Acrobat Reader DC 26.002.22031](https://patchblox.com/security/data/product/windows-app/adobe-acrobat-reader-dc.md), the latest version, which also fixes every CVE listed here ## Applies to | Product | Release | Fixed in | |---|---|---| | [Adobe Acrobat Reader DC](https://patchblox.com/security/data/product/windows-app/adobe-acrobat-reader-dc.md) | | 21.001.20155 | ## CVEs this fix closes | CVE | Priority | Title | CVSS | EPSS | Exploitation | |---|---|---|---:|---:|---| | [CVE-2021-21017](https://patchblox.com/security/data/cve/CVE-2021-21017.md) | Patch now | Adobe Acrobat and Reader Heap-based Buffer Overflow Vulnerability | 8.8 | 0.8627 | CISA KEV | | [CVE-2021-28550](https://patchblox.com/security/data/cve/CVE-2021-28550.md) | Patch now | Adobe Acrobat and Reader Use-After-Free Vulnerability | 8.8 | 0.5213 | CISA KEV | | [CVE-2021-28560](https://patchblox.com/security/data/cve/CVE-2021-28560.md) | High | Adobe Acrobat Reader heap corruption vulnerability could lead to arbitrary code execution | 8.8 | 0.6692 | | | [CVE-2020-24435](https://patchblox.com/security/data/cve/CVE-2020-24435.md) | High | Acrobat Reader DC Heap-based Buffer Overflow Could Lead to Arbitrary Code Execution | 7.8 | 0.5272 | | | [CVE-2020-24437](https://patchblox.com/security/data/cve/CVE-2020-24437.md) | High | Acrobat Reader DC Use-After-Free Vulnerability Could Lead to Arbitrary Code Execution | 7.8 | 0.4655 | | | [CVE-2020-24430](https://patchblox.com/security/data/cve/CVE-2020-24430.md) | High | Acrobat Pro DC Use-After-Free vulnerability Could Lead to Arbitrary Code Execution | 7.8 | 0.1867 | | | [CVE-2020-24436](https://patchblox.com/security/data/cve/CVE-2020-24436.md) | High | Acrobat Pro DC PDF Export Out-Of-Bounds Write Vulnerability Could Lead to Arbitrary Code Execution | 7.8 | 0.1702 | | | [CVE-2020-24433](https://patchblox.com/security/data/cve/CVE-2020-24433.md) | High | Adobe Acrobat Reader DC Local Privilege Escalation via Installer Component | 7.8 | 0.1587 | | | [CVE-2020-24432](https://patchblox.com/security/data/cve/CVE-2020-24432.md) | High | Acrobat Reader DC Arbitrary JavaScript Execution in PDF Documents | 7.8 | 0.1110 | | | [CVE-2021-28558](https://patchblox.com/security/data/cve/CVE-2021-28558.md) | High | Adobe Acrobat Reader heap-based buffer overflow could lead to arbitrary code execution | 8.8 | 0.1036 | | | [CVE-2021-28562](https://patchblox.com/security/data/cve/CVE-2021-28562.md) | High | Adobe Acrobat Reader use-after-free could lead to arbitrary code execution | 8.8 | 0.0512 | | | [CVE-2021-21086](https://patchblox.com/security/data/cve/CVE-2021-21086.md) | High | Adobe Reader CoolType Arbitrary Stack Manipulation | 7.8 | 0.0471 | | | [CVE-2021-21021](https://patchblox.com/security/data/cve/CVE-2021-21021.md) | High | Acrobat Reader DC Use-After-Free Vulnerability Could Lead To Arbitrary Code Execution | 8.8 | 0.0430 | | | [CVE-2021-21028](https://patchblox.com/security/data/cve/CVE-2021-21028.md) | High | Acrobat Reader DC Use-After-Free Vulnerability Could Lead To Arbitrary Code Execution | 8.8 | 0.0430 | | | [CVE-2021-21033](https://patchblox.com/security/data/cve/CVE-2021-21033.md) | High | Acrobat Reader DC Use-After-Free Vulnerability Could Lead To Arbitrary Code Execution | 8.8 | 0.0430 | | | [CVE-2021-21035](https://patchblox.com/security/data/cve/CVE-2021-21035.md) | High | Acrobat Reader DC Use-After-Free Vulnerability Could Lead To Arbitrary Code Execution | 8.8 | 0.0430 | | | [CVE-2021-28565](https://patchblox.com/security/data/cve/CVE-2021-28565.md) | High | Adobe Acrobat Reader out-of-bounds read could lead to information exposure | 8.8 | 0.0394 | | | [CVE-2021-21044](https://patchblox.com/security/data/cve/CVE-2021-21044.md) | High | Acrobat Reader DC Out-Of-Bounds Write Vulnerability Could Lead To Arbitrary Code Execution | 7.8 | 0.0369 | | | [CVE-2021-28553](https://patchblox.com/security/data/cve/CVE-2021-28553.md) | High | Adobe Acrobat Reader use-after-free vulnerability could lead to arbitrary code execution | 8.8 | 0.0354 | | | [CVE-2021-28564](https://patchblox.com/security/data/cve/CVE-2021-28564.md) | High | Adobe Acrobat Reader out-of-bounds write vulnerability could lead to arbitrary code execution | 8.8 | 0.0353 | | | [CVE-2021-21037](https://patchblox.com/security/data/cve/CVE-2021-21037.md) | High | Acrobat Reader DC Path Traversal Vulnerability Could Lead To Arbitrary Code Execution | 7.8 | 0.0349 | | | [CVE-2021-21038](https://patchblox.com/security/data/cve/CVE-2021-21038.md) | High | Acrobat Reader DC Out-Of-Bounds Write Vulnerability Could Lead To Arbitrary Code Execution | 7.8 | 0.0342 | | | [CVE-2021-28551](https://patchblox.com/security/data/cve/CVE-2021-28551.md) | High | Adobe Acrobat Pro DC JPEG2000 Editing Out-Of-Bounds Read Remote Code Execution Vulnerability | 7.8 | 0.0339 | | | [CVE-2021-28561](https://patchblox.com/security/data/cve/CVE-2021-28561.md) | High | Adobe Acrobat Reader memory corruption vulnerability could lead to remote code execution | 8.8 | 0.0327 | | | [CVE-2021-21039](https://patchblox.com/security/data/cve/CVE-2021-21039.md) | High | Acrobat Reader DC Use-After-Free Vulnerability Could Lead To Arbitrary Code Execution | 7.8 | 0.0319 | | | [CVE-2021-21040](https://patchblox.com/security/data/cve/CVE-2021-21040.md) | High | Acrobat Reader DC Use-After-Free Vulnerability Could Lead To Arbitrary Code Execution | 7.8 | 0.0319 | | | [CVE-2021-21041](https://patchblox.com/security/data/cve/CVE-2021-21041.md) | High | Acrobat Reader DC Use-After-Free Vulnerability Could Lead To Arbitrary Code Execution | 7.8 | 0.0319 | | | [CVE-2020-24429](https://patchblox.com/security/data/cve/CVE-2020-24429.md) | High | Acrobat Reader DC for macOS Signature Verification Bypass Could Lead to Privilege Escalation | 7.8 | 0.0305 | | | [CVE-2021-21036](https://patchblox.com/security/data/cve/CVE-2021-21036.md) | High | Acrobat Reader DC Integer Overflow Vulnerability Could Lead To Arbitrary Code Execution | 7.8 | 0.0291 | | | [CVE-2021-21058](https://patchblox.com/security/data/cve/CVE-2021-21058.md) | High | Acrobat Reader DC Memory Corruption Vulnerability Could Lead to Arbitrary Code Execution | 7.8 | 0.0273 | | | [CVE-2021-21059](https://patchblox.com/security/data/cve/CVE-2021-21059.md) | High | Acrobat Reader DC Buffer Overflow Vulnerability Could Lead to Arbitrary Code Execution | 7.8 | 0.0273 | | | [CVE-2021-21062](https://patchblox.com/security/data/cve/CVE-2021-21062.md) | High | Acrobat Reader DC Buffer Overflow Vulnerability Could Lead To Arbitrary Code Execution | 7.8 | 0.0273 | | | [CVE-2021-21063](https://patchblox.com/security/data/cve/CVE-2021-21063.md) | High | Acrobat Reader DC Buffer Overflow Vulnerability Could Lead to Arbitrary Code Execution | 7.8 | 0.0273 | | | [CVE-2021-28545](https://patchblox.com/security/data/cve/CVE-2021-28545.md) | High | Acrobat Reader DC Missing Support for Integrity Check | 8.1 | 0.0251 | | | [CVE-2020-24428](https://patchblox.com/security/data/cve/CVE-2020-24428.md) | High | Acrobat Reader DC for macOS Race Condition Vulnerability Could Lead to Privilege Escalation | 7.7 | 0.0226 | | | [CVE-2021-21045](https://patchblox.com/security/data/cve/CVE-2021-21045.md) | High | Acrobat Reader DC Improper Installer Access Control Vulnerability Could Lead To Privilege Escalation | 8.2 | 0.0178 | | | [CVE-2021-21088](https://patchblox.com/security/data/cve/CVE-2021-21088.md) | High | Adobe Acrobat Pro DC Use-After-Free Remote Code Execution Vulnerability | 7.8 | 0.0038 | | | [CVE-2021-21042](https://patchblox.com/security/data/cve/CVE-2021-21042.md) | Routine | Acrobat Reader DC Out-Of-Bounds Read Information Disclosure Vulnerability | 6.5 | 0.1471 | | | [CVE-2020-29075](https://patchblox.com/security/data/cve/CVE-2020-29075.md) | Routine | PDF Injection BlackHat Talk | 6.5 | 0.0792 | | | [CVE-2020-24438](https://patchblox.com/security/data/cve/CVE-2020-24438.md) | Routine | Acrobat Reader DC Use-After-Free Vulnerability Could Lead to Information Disclosure | 3.3 | 0.0389 | | | [CVE-2020-24426](https://patchblox.com/security/data/cve/CVE-2020-24426.md) | Routine | Acrobat Reader DC Out-Of-Bounds Read Information Disclosure Vulnerability | 3.3 | 0.0306 | | | [CVE-2020-24434](https://patchblox.com/security/data/cve/CVE-2020-24434.md) | Routine | Acrobat Pro DC Out-Of-Bounds Read Vulnerability Could Lead to Information Disclosure | 3.3 | 0.0306 | | | [CVE-2021-28555](https://patchblox.com/security/data/cve/CVE-2021-28555.md) | Routine | Adobe Acrobat Reader out-of-bounds Read could lead to information disclosure | 6.5 | 0.0284 | | | [CVE-2021-21034](https://patchblox.com/security/data/cve/CVE-2021-21034.md) | Routine | Acrobat Reader DC Out-Of-Bounds Read Information Disclosure Vulnerability | 4.3 | 0.0259 | | | [CVE-2020-24427](https://patchblox.com/security/data/cve/CVE-2020-24427.md) | Routine | Acrobat Reader DC Codec Input Validation Vulnerability Could Lead to Information Disclosure | 3.3 | 0.0245 | | | [CVE-2021-21061](https://patchblox.com/security/data/cve/CVE-2021-21061.md) | Routine | Acrobat Pro DC Use-After-Free Vulnerability Could Lead to Information Disclosure | 3.3 | 0.0210 | | | [CVE-2021-21089](https://patchblox.com/security/data/cve/CVE-2021-21089.md) | Routine | Adobe Acrobat Reader DC URI Parsing Out-Of-Bounds Read | 3.3 | 0.0187 | | | [CVE-2021-28557](https://patchblox.com/security/data/cve/CVE-2021-28557.md) | Routine | Adobe Acrobat Reader out-of-bounds read in PDFLibTool could lead to information exposure | 4.3 | 0.0180 | | | [CVE-2021-21046](https://patchblox.com/security/data/cve/CVE-2021-21046.md) | Routine | Acrobat Reader DC Buffer Overflow Vulnerability Could Lead To Arbitrary Code Execution | 3.3 | 0.0174 | | | [CVE-2021-28559](https://patchblox.com/security/data/cve/CVE-2021-28559.md) | Routine | Adobe Acrobat Reader privacy violation vulnerability could lead to privilege escalation | 5.3 | 0.0165 | | | [CVE-2021-21060](https://patchblox.com/security/data/cve/CVE-2021-21060.md) | Routine | Acrobat Pro DC Improper File Parsing Could Lead to Information Disclosure | 4.6 | 0.0164 | | | [CVE-2020-24431](https://patchblox.com/security/data/cve/CVE-2020-24431.md) | Routine | Acrobat Reader DC for macOS Dynamic Library Injection Vulnerability | 4.4 | 0.0161 | | | [CVE-2021-28546](https://patchblox.com/security/data/cve/CVE-2021-28546.md) | Routine | Acrobat Reader DC Missing Support for Integrity Check | 6.5 | 0.0147 | | | [CVE-2021-21057](https://patchblox.com/security/data/cve/CVE-2021-21057.md) | Routine | Acrobat Reader DC Invalid Memory Read Due To An Uninitialized Pointer | 6.6 | 0.0115 | | | [CVE-2020-24439](https://patchblox.com/security/data/cve/CVE-2020-24439.md) | Routine | Acrobat Reader DC for macOS Signature Validation Bypass | 2.8 | 0.0064 | | | [CVE-2021-40723](https://patchblox.com/security/data/cve/CVE-2021-40723.md) | Routine | Acrobat Reader DC Out-Of-Bounds Read Information Disclosure Vulnerability | 5.5 | 0.0031 | | --- Data as of 2026-11-11T13:47:35Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.