← Back

CVE-2021-44714

nvd nist
Published: Jan 14, 2022Modified: Jun 17, 2026

JSON object

Loading...
3.3
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
Exploitability: 1.8 / Impact: 1.4
Source: NVD

Description

Acrobat Reader DC version 21.007.20099 (and earlier), 20.004.30017 (and earlier) and 17.011.30204 (and earlier) are affected by a Violation of Secure Design Principles that could lead to a Security feature bypass. Acrobat Reader DC displays a warning message when a user clicks on a PDF file, which could be used by an attacker to mislead the user. In affected versions, this warning message does not include custom protocols when used by the sender. User interaction is required to abuse this vulnerability as they would need to click 'allow' on the warning message of a malicious file.

Affected (6)

4 products
Acrobat
Acrobat Reader
Acrobat Dc
Acrobat Reader Dc
Configuration B
4 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Adobe
From 17.011.30059 to 17.011.30204
From 20.001.30005 to 20.004.30017
Adobe
From 17.011.30059 to 17.011.30204
From 20.001.30005 to 20.004.30017
Running on/withPlatform Versions
Microsoft
Windows
All versions
Configuration C
2 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
From 15.008.20082 to 21.007.20099
From 15.008.20082 to 21.007.20099
Running on/withPlatform Versions
Apple
Macos
All versions

References (2)

Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory

Timeline

No history available yet.