ZeroHour

CVE-2021-39840

CVSS 3.0
7.8 high
EPSS
51%p99
Published
()
Modified
Description

Acrobat Reader DC versions 2021.005.20060 (and earlier), 2020.004.30006 (and earlier) and 2017.011.30199 (and earlier) are affected by a use-after-free vulnerability when processing AcroForms that could result in arbitrary code execution in the context of the current user. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.

Vendors
adobe
Products
acrobat, acrobat reader, acrobat dc, acrobat reader dc
Weakness
CWE-416
Vector
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

In the news

No ingested article mentions this CVE yet.