Acrobat Reader DC Improper Installer Access Control Vulnerability Could Lead To Privilege Escalation
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | |||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| Adobe | Acrobat Reader | affected |
|
Configuration 1 [-]
| AND |
|
No data.
No data available yet.
| Source | ID | Title |
|---|---|---|
EUVD |
EUVD-2021-8436 | Acrobat Reader DC versions versions 2020.013.20074 (and earlier), 2020.001.30018 (and earlier) and 2017.011.30188 (and earlier) are affected by an improper access control vulnerability. An unauthenticated attacker could leverage this vulnerability to elevate privileges in the context of the current user. |
No CVSS v4.0
No CVSS v3.0
This CVE is not in the KEV list.
Exploit prediction score: 1.8% (1.782% probability within 30 days)
| Type | Values Removed | Values Added |
|---|---|---|
| First Time appeared |
Adobe acrobat 2017
Adobe acrobat 2020 Adobe acrobat Reader 2017 Adobe acrobat Reader 2020 |
|
| CPEs | cpe:2.3:a:adobe:acrobat_2017:*:*:*:*:*:*:*:* cpe:2.3:a:adobe:acrobat_2020:*:*:*:*:*:*:*:* cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:*:macos:*:* cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:*:windows:*:* cpe:2.3:a:adobe:acrobat_reader_2017:*:*:*:*:*:*:*:* cpe:2.3:a:adobe:acrobat_reader_2020:*:*:*:*:*:*:*:* cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:macos:*:* cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:windows:*:* |
|
| Vendors & Products |
Adobe acrobat 2017
Adobe acrobat 2020 Adobe acrobat Reader 2017 Adobe acrobat Reader 2020 |
|
| Metrics |
ssvc
|