Windows apps · Application version · May 28, 2021

Adobe Acrobat Reader DC 21.005.20048

Adobe Acrobat Reader DC 21.005.20048, released May 28, 2021, fixes 4 CVEs in Adobe Acrobat Reader DC. None of them is reported as exploited. Patch Radar priority: High. The latest Adobe Acrobat Reader DC is 26.002.22031, which also fixes every one of these CVEs.

High

Superseded. The latest Adobe Acrobat Reader DC is 26.002.22031, which also fixes every CVE on this page. Install that instead.

CVEs closed
4
None rated Critical
Exploited
0
None reported
Highest CVSS
7.8
Base score, 0 to 10
Highest EPSS
0.4603
98th percentile

Priority of the 4 CVEs

Patch now 0 Urgent 0 High 4 Routine 0

Applies to

ProductVersion
Adobe Acrobat Reader DC21.005.20048

CVEs this fix closes

PriorityCVETitleCVSSEPSSExploitation
High CVE-2021-28554 Adobe Acrobat Reader DC Path Parsing Out-Of-Bounds Read could lead to arbitrary code execution7.8 0.4603 None reported
High CVE-2021-28632 ZDI-CAN-13471: Adobe Acrobat Reader DC AcroForm Field Use-After-Free Remote Code Execution Vulnerability7.8 0.0517 None reported
High CVE-2021-28552 Adobe Acrobat Reader DC XFA Template Use-After-Free Remote Code Execution Vulnerability7.8 0.0471 None reported
High CVE-2021-28631 Adobe Acrobat Reader DC AcroForm Field Use-After-Free Remote Code Execution Vulnerability7.8 0.0471 None reported
Showing 1 to 4 of 4 1

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.