Adobe Acrobat Reader DC 21.001.20155
Adobe Acrobat Reader DC 21.001.20155, released April 27, 2021, fixes 56 CVEs in Adobe Acrobat Reader DC. 2 of them are being exploited (CVE-2021-21017); 2 on CISA KEV. Patch Radar priority: Patch now. The latest Adobe Acrobat Reader DC is 26.002.22031, which also fixes every one of these CVEs.
Superseded. The latest Adobe Acrobat Reader DC is 26.002.22031, which also fixes every CVE on this page. Install that instead.
Priority of the 56 CVEs
Applies to
| Product | Version |
|---|---|
| Adobe Acrobat Reader DC | 21.001.20155 |
CVEs this fix closes
| Priority | CVE | Title | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|
| Patch now | CVE-2021-21017 | Adobe Acrobat and Reader Heap-based Buffer Overflow Vulnerability | 8.8 | 0.8627 | KEVExploited |
| Patch now | CVE-2021-28550 | Adobe Acrobat and Reader Use-After-Free Vulnerability | 8.8 | 0.5213 | KEVExploited |
| High | CVE-2021-28560 | Adobe Acrobat Reader heap corruption vulnerability could lead to arbitrary code execution | 8.8 | 0.6692 | None reported |
| High | CVE-2020-24435 | Acrobat Reader DC Heap-based Buffer Overflow Could Lead to Arbitrary Code Execution | 7.8 | 0.5272 | None reported |
| High | CVE-2020-24437 | Acrobat Reader DC Use-After-Free Vulnerability Could Lead to Arbitrary Code Execution | 7.8 | 0.4655 | None reported |
| High | CVE-2020-24430 | Acrobat Pro DC Use-After-Free vulnerability Could Lead to Arbitrary Code Execution | 7.8 | 0.1867 | None reported |
| High | CVE-2020-24436 | Acrobat Pro DC PDF Export Out-Of-Bounds Write Vulnerability Could Lead to Arbitrary Code Execution | 7.8 | 0.1702 | None reported |
| High | CVE-2020-24433 | Adobe Acrobat Reader DC Local Privilege Escalation via Installer Component | 7.8 | 0.1587 | None reported |
| High | CVE-2020-24432 | Acrobat Reader DC Arbitrary JavaScript Execution in PDF Documents | 7.8 | 0.1110 | None reported |
| High | CVE-2021-28558 | Adobe Acrobat Reader heap-based buffer overflow could lead to arbitrary code execution | 8.8 | 0.1036 | None reported |
| High | CVE-2021-28562 | Adobe Acrobat Reader use-after-free could lead to arbitrary code execution | 8.8 | 0.0512 | None reported |
| High | CVE-2021-21086 | Adobe Reader CoolType Arbitrary Stack Manipulation | 7.8 | 0.0471 | None reported |
| High | CVE-2021-21021 | Acrobat Reader DC Use-After-Free Vulnerability Could Lead To Arbitrary Code Execution | 8.8 | 0.0430 | None reported |
| High | CVE-2021-21028 | Acrobat Reader DC Use-After-Free Vulnerability Could Lead To Arbitrary Code Execution | 8.8 | 0.0430 | None reported |
| High | CVE-2021-21033 | Acrobat Reader DC Use-After-Free Vulnerability Could Lead To Arbitrary Code Execution | 8.8 | 0.0430 | None reported |
| High | CVE-2021-21035 | Acrobat Reader DC Use-After-Free Vulnerability Could Lead To Arbitrary Code Execution | 8.8 | 0.0430 | None reported |
| High | CVE-2021-28565 | Adobe Acrobat Reader out-of-bounds read could lead to information exposure | 8.8 | 0.0394 | None reported |
| High | CVE-2021-21044 | Acrobat Reader DC Out-Of-Bounds Write Vulnerability Could Lead To Arbitrary Code Execution | 7.8 | 0.0369 | None reported |
| High | CVE-2021-28553 | Adobe Acrobat Reader use-after-free vulnerability could lead to arbitrary code execution | 8.8 | 0.0354 | None reported |
| High | CVE-2021-28564 | Adobe Acrobat Reader out-of-bounds write vulnerability could lead to arbitrary code execution | 8.8 | 0.0353 | None reported |
| High | CVE-2021-21037 | Acrobat Reader DC Path Traversal Vulnerability Could Lead To Arbitrary Code Execution | 7.8 | 0.0349 | None reported |
| High | CVE-2021-21038 | Acrobat Reader DC Out-Of-Bounds Write Vulnerability Could Lead To Arbitrary Code Execution | 7.8 | 0.0342 | None reported |
| High | CVE-2021-28551 | Adobe Acrobat Pro DC JPEG2000 Editing Out-Of-Bounds Read Remote Code Execution Vulnerability | 7.8 | 0.0339 | None reported |
| High | CVE-2021-28561 | Adobe Acrobat Reader memory corruption vulnerability could lead to remote code execution | 8.8 | 0.0327 | None reported |
| High | CVE-2021-21039 | Acrobat Reader DC Use-After-Free Vulnerability Could Lead To Arbitrary Code Execution | 7.8 | 0.0319 | None reported |
Patch Radar data is free to use with attribution. Terms and how to credit it.
Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.