# Adobe Acrobat Reader DC 21.005.20058

Adobe Acrobat Reader DC 21.005.20058, released June 27, 2021, fixes 19 CVEs in Adobe Acrobat Reader DC. None of them is reported as exploited. Patch Radar priority: High. The latest Adobe Acrobat Reader DC is 26.002.22031, which also fixes every one of these CVEs.

- Web page: https://patchblox.com/security/fix/windows-app/adobe.acrobat.reader.32-bit-21.005.20058
- Platform: Windows apps
- Released: Jun 27, 2021
- Priority: High (Closes CVE-2021-28639, high severity)
- CVEs: 19, exploited: 0, on CISA KEV: 0
- Superseded by: [Adobe Acrobat Reader DC 26.002.22031](https://patchblox.com/security/data/product/windows-app/adobe-acrobat-reader-dc.md), the latest version, which also fixes every CVE listed here

## Applies to

| Product | Release | Fixed in |
|---|---|---|
| [Adobe Acrobat Reader DC](https://patchblox.com/security/data/product/windows-app/adobe-acrobat-reader-dc.md) |  | 21.005.20058 |

## CVEs this fix closes

| CVE | Priority | Title | CVSS | EPSS | Exploitation |
|---|---|---|---:|---:|---|
| [CVE-2021-28639](https://patchblox.com/security/data/cve/CVE-2021-28639.md) | High | Adobe Acrobat Reader DC setAction Use-After-Free Remote Code Execution Vulnerability | 7.8 | 0.6605 |  |
| [CVE-2021-28640](https://patchblox.com/security/data/cve/CVE-2021-28640.md) | High | Adobe Acrobat Reader Use-After-Free Arbitrary Code Execution Vulnerability | 7.3 | 0.5338 |  |
| [CVE-2021-28635](https://patchblox.com/security/data/cve/CVE-2021-28635.md) | High | Adobe Acrobat Reader Use-After-Free Vulnerability | 7.8 | 0.5118 |  |
| [CVE-2021-28638](https://patchblox.com/security/data/cve/CVE-2021-28638.md) | High | Adobe Acrobat Reader DC PDF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability | 7.8 | 0.0494 |  |
| [CVE-2021-28641](https://patchblox.com/security/data/cve/CVE-2021-28641.md) | High | Adobe Acrobat Reader Use-After-Free Arbitrary Code Execution Vulnerability | 7.8 | 0.0433 |  |
| [CVE-2021-35981](https://patchblox.com/security/data/cve/CVE-2021-35981.md) | High | Adobe Acrobat Reader DC launchURL Use-After-Free Remote Code Execution Vulnerability | 7.8 | 0.0392 |  |
| [CVE-2021-35983](https://patchblox.com/security/data/cve/CVE-2021-35983.md) | High | Adobe Acrobat Reader DC AcroForm Use-After-Free Remote Code Execution Vulnerability | 7.8 | 0.0392 |  |
| [CVE-2021-28642](https://patchblox.com/security/data/cve/CVE-2021-28642.md) | High | Adobe Acrobat Pro DC Out-of-Bounds Write Arbitrary Code Execution Vulnerability | 7.8 | 0.0371 |  |
| [CVE-2021-28637](https://patchblox.com/security/data/cve/CVE-2021-28637.md) | High | Adobe Acrobat Pro DC PDFLibTool Out-of-Bounds Read Remote Code Execution Vulnerability | 7.1 | 0.0285 |  |
| [CVE-2021-28636](https://patchblox.com/security/data/cve/CVE-2021-28636.md) | High | Adobe Acrobat Reader Unquoted Search Path Vulnerability | 7.3 | 0.0222 |  |
| [CVE-2021-28634](https://patchblox.com/security/data/cve/CVE-2021-28634.md) | High | Adobe Acrobat Reader AcrobatUtils.scpt Extension OS Command Injection Vulnerability | 8.2 | 0.0221 |  |
| [CVE-2021-28644](https://patchblox.com/security/data/cve/CVE-2021-28644.md) | High | Adobe Acrobat SpellDictionaryCreate Path Traversal Remote Code Execution Vulnerability | 7.8 | 0.0045 |  |
| [CVE-2021-35980](https://patchblox.com/security/data/cve/CVE-2021-35980.md) | High | Adobe Acrobat Reader SpellDictionaryExport Path Traversal Remote Code Execution Vulnerability | 7.8 | 0.0045 |  |
| [CVE-2021-35986](https://patchblox.com/security/data/cve/CVE-2021-35986.md) | Routine | Adobe Acrobat Pro DC getAnnot Type Confusion Information Disclosure Vulnerability | 3.3 | 0.0272 |  |
| [CVE-2021-35987](https://patchblox.com/security/data/cve/CVE-2021-35987.md) | Routine | Adobe Acrobat Pro DC PDFLibTool Out-of-Bound Read | 3.3 | 0.0214 |  |
| [CVE-2021-35988](https://patchblox.com/security/data/cve/CVE-2021-35988.md) | Routine | Adobe Acrobat Pro DC Out-of-Bounds Read Bug | 3.3 | 0.0214 |  |
| [CVE-2021-28643](https://patchblox.com/security/data/cve/CVE-2021-28643.md) | Routine | Adobe Acrobat Pro DC embedDocAsDataObject Type Confusion Information Disclosure Vulnerability | 3.3 | 0.0192 |  |
| [CVE-2021-35985](https://patchblox.com/security/data/cve/CVE-2021-35985.md) | Routine | Adobe Acrobat Pro DC PDFLibTool Null Pointer Dereference Bug | 5.5 | 0.0191 |  |
| [CVE-2021-35984](https://patchblox.com/security/data/cve/CVE-2021-35984.md) | Routine | Adobe Acrobat Pro DC PDFLibTool Null Pointer Dereference Bug | 6.5 | 0.0182 |  |

---

Data as of 2026-11-11T13:47:35Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo

Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.