← Back

CVE-2021-28559

nvd nist
Published: Sep 2, 2021Modified: Jun 17, 2026

JSON object

Loading...
5.3
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Exploitability: 3.9 / Impact: 1.4
Source: psirt@adobe.com (Secondary)

Description

Acrobat Reader DC versions versions 2021.001.20150 (and earlier), 2020.001.30020 (and earlier) and 2017.011.30194 (and earlier) are affected by an Information Exposure vulnerability. An unauthenticated attacker could leverage this vulnerability to get access to restricted data stored within global variables and objects.

Affected (6)

Adobe
4 products
Acrobat
Acrobat Reader
Acrobat Dc
Acrobat Reader Dc
Configuration B
4 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Adobe
Acrobat
17.011.30059 ≤ version ≤ 17.011.30194
Acrobat
20.001.30005 ≤ version ≤ 20.001.30020
Adobe
Acrobat Reader
17.011.30059 ≤ version ≤ 17.011.30194
Acrobat Reader
20.001.30005 ≤ version ≤ 20.001.30020
Running on/withPlatform Versions
Microsoft
Windows
All versions
Configuration C
2 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Acrobat Dc
15.008.20082 ≤ version ≤ 21.001.20150
Acrobat Reader Dc
15.008.20082 ≤ version ≤ 21.001.20150
Running on/withPlatform Versions
Apple
Macos
All versions

Related CWEs

CWE-359
Exposure of Private Personal Information to an Unauthorized Actor
The product does not properly prevent a person's private, personal information from being accessed by actors who either (1) are not explicitly authorized to access the information or (2) do not have the implicit consent of the person about whom the information is collected.

References (2)

Source: psirt@adobe.com
Release NotesVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Release NotesVendor Advisory

Timeline

No history available yet.