ByteOS Network

CVE Vulnerability Details :

CVE-2021-28559

PUBLISHED

More Info Official Page

Assigner-adobe

Assigner Org ID-078d4453-3bcd-4900-85e6-15281da43538

Published At-02 Sep, 2021 | 16:08

Updated At-17 Sep, 2024 | 04:25

▼CVE Numbering Authority (CNA)

Adobe Acrobat Reader privacy violation vulnerability could lead to privilege escalation

Acrobat Reader DC versions versions 2021.001.20150 (and earlier), 2020.001.30020 (and earlier) and 2017.011.30194 (and earlier) are affected by an Information Exposure vulnerability. An unauthenticated attacker could leverage this vulnerability to get access to restricted data stored within global variables and objects.

Affected Products

Vendor

Adobe Inc.

Product

Acrobat Reader

Versions

Affected

From unspecified through 2020.001.30020 (custom)
From unspecified through 2021.001.20150 (custom)
From unspecified through 2017.011.30194 (custom)
From unspecified through None (custom)

Problem Types

Type	CWE ID	Description
CWE	CWE-359	Exposure of Private Information ('Privacy Violation') (CWE-359)

Metrics

Version	Base score	Base severity	Vector
3.1	5.3	MEDIUM	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

References

Hyperlink	Resource
https://helpx.adobe.com/security/products/acrobat/apsb21-29.html	x_refsource_MISC

▼Authorized Data Publishers (ADP)

CVE Program Container

References

Hyperlink	Resource
https://helpx.adobe.com/security/products/acrobat/apsb21-29.html	x_refsource_MISC x_transferred

Affected Products

Affected

Problem Types

Metrics

Metrics Other Info

Impacts

Solutions

Configurations

Workarounds

Exploits

Credits

Timeline

Replaced By

Rejected Reason

References

Affected Products

Metrics

Metrics Other Info

Impacts

Solutions

Configurations

Workarounds

Exploits

Credits

Timeline

Replaced By

Rejected Reason

References