CVE-2021-21045

Acrobat Reader DC Improper Installer Access Control Vulnerability Could Lead To Privilege Escalation

Published Feb 11, 2021 CVSS 3.1 · 8.2 High EPSS 1.8% KEV · Not listed
Description
Acrobat Reader DC versions versions 2020.013.20074 (and earlier), 2020.001.30018 (and earlier) and 2017.011.30188 (and earlier) are affected by an improper access control vulnerability. An unauthenticated attacker could leverage this vulnerability to elevate privileges in the context of the current user.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2021-8436 Acrobat Reader DC versions versions 2020.013.20074 (and earlier), 2020.001.30018 (and earlier) and 2017.011.30188 (and earlier) are affected by an improper access control vulnerability. An unauthenticated attacker could leverage this vulnerability to elevate privileges in the context of the current user.
History
Type Values Removed Values Added
First Time appeared Adobe acrobat 2017
Adobe acrobat 2020
Adobe acrobat Reader 2017
Adobe acrobat Reader 2020
CPEs cpe:2.3:a:adobe:acrobat_2017:*:*:*:*:*:*:*:*
cpe:2.3:a:adobe:acrobat_2020:*:*:*:*:*:*:*:*
cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:*:macos:*:*
cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:*:windows:*:*
cpe:2.3:a:adobe:acrobat_reader_2017:*:*:*:*:*:*:*:*
cpe:2.3:a:adobe:acrobat_reader_2020:*:*:*:*:*:*:*:*
cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:macos:*:*
cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:windows:*:*
Vendors & Products Adobe acrobat 2017
Adobe acrobat 2020
Adobe acrobat Reader 2017
Adobe acrobat Reader 2020
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}