Windows apps · Application version · December 24, 2021

Adobe Acrobat Reader DC 21.011.20039

Adobe Acrobat Reader DC 21.011.20039, released December 24, 2021, fixes 28 CVEs in Adobe Acrobat Reader DC. None of them is reported as exploited. Patch Radar priority: High. The latest Adobe Acrobat Reader DC is 26.002.22031, which also fixes every one of these CVEs.

High

Superseded. The latest Adobe Acrobat Reader DC is 26.002.22031, which also fixes every CVE on this page. Install that instead.

CVEs closed

None rated Critical

Exploited

None reported

Highest CVSS

7.8

Base score, 0 to 10

Highest EPSS

0.5837

99th percentile

Priority of the 28 CVEs

Patch now 0
                                Urgent 0
                                High 17
                                Routine 11

Applies to

Product	Version
Adobe Acrobat Reader DC	21.011.20039

CVEs this fix closes

Priority	CVE	Title	CVSS	EPSS	Exploitation
High	CVE-2021-44703	Adobe Acrobat Pro DC Stack Overflow Vulnerability Arbitrary code execution	7.8	0.5837	None reported
High	CVE-2021-44708	Adobe Acrobat Pro DC Heap Overflow could lead to Arbitrary code execution	7.8	0.3753	None reported
High	CVE-2021-44709	Adobe Acrobat Pro DC Heap Overflow Vulnerability could lead to Arbitrary code execution	7.8	0.2847	None reported
High	CVE-2021-44701	Adobe Acrobat Reader DC AcroForm Use-After-Free Remote Code Execution Vulnerability	7.8	0.2091	None reported
High	CVE-2021-45062	Adobe Acrobat Reader DC Font Parsing Use-After-Free Remote Code Execution Vulnerability	7.8	0.1617	None reported
High	CVE-2021-45068	Adobe Acrobat Reader DC Font Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability	7.8	0.1226	None reported
High	CVE-2021-44710	Adobe Acrobat Reader Use-after-free could lead to Arbitrary code execution	7.8	0.1138	None reported
High	CVE-2021-45064	Adobe Acrobat Reader DC AcroForm Use-After-Free Remote Code Execution Vulnerability	7.8	0.1131	None reported
High	CVE-2021-44704	Adobe Acrobat Reader Use-After-Free could lead to Arbitrary code execution	7.8	0.1058	None reported
High	CVE-2021-44711	Adobe Acrobat Reader DC annotation gestures integer overflow vulnerability	7.8	0.0978	None reported
High	CVE-2021-44706	Adobe Acrobat Reader Collab.registerReview Use-After-Free Remote Execution Vulnerability	7.8	0.0848	None reported
High	CVE-2021-45060	Adobe Acrobat Reader DC TTF Font Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability	7.8	0.0844	None reported
High	CVE-2021-44707	Adobe Acrobat Reader DC OTF Font Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability	7.8	0.0819	None reported
High	CVE-2021-45061	Adobe Acrobat Reader DC Font Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability	7.8	0.0771	None reported
High	CVE-2021-44705	Adobe Acrobat Reader Use-After-Free could lead to Arbitrary code execution	7.8	0.0726	None reported
High	CVE-2022-24092	Adobe Acrobat Reader DC Font Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability	7.8	0.0450	None reported
High	CVE-2022-24091	Adobe Acrobat Reader DC Font Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability	7.8	0.0410	None reported
Routine	CVE-2021-44715	Adobe Acrobat Reader DC Out-of-Bounds Read Information Disclosure Vulnerability	5.5	0.1470	None reported
Routine	CVE-2021-45063	Adobe Acrobat Reader DC JP2 File Parsing Use-After-Free Information Disclosure Vulnerability	5.5	0.0609	None reported
Routine	CVE-2021-44742	Adobe Reader Out-of-bounds Read Remote Code Execution Vulnerability	5.5	0.0574	None reported
Routine	CVE-2021-44740	Adobe Acrobat Pro DC NULL Pointer Dereference could lead to Application-denial-of-service	5.5	0.0355	None reported
Routine	CVE-2021-44741	Adobe Acrobat Pro DC NULL Pointer Dereference could lead to Application-denial-of-service	5.5	0.0355	None reported
Routine	CVE-2021-45067	Adobe Acrobat Reader Memory Corruption could lead to Information Disclosure	5.5	0.0348	None reported
Routine	CVE-2021-44713	Adobe Acrobat Reader DC Use After Free could lead to Application denial-of-service	5.5	0.0269	None reported
Routine	CVE-2021-44714	Adobe Acrobat Reader Missing Custom Protocols in Warning Message Prompts	3.3	0.0250	None reported

For tools and AI agents

This page as data: JSON · Markdown

Link to this page

If this page saved you time, a link to it in your ticket, advisory or write-up helps others find it.

HTML

<a href="https://patchblox.com/security/fix/windows-app/adobe.acrobat.reader.32-bit-21.011.20039">Adobe Acrobat Reader DC 21.011.20039 on Patchblox Patch Radar</a>

Reusing the data? How to credit Patch Radar.

Is it current everywhere?

Patchblox finds every install below the fixed version, including per-user copies, and updates them from a signed catalog package.

Get a demo

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.