← Database

CVE-2021-39860

MEDIUM CVSS: 5.5 Published: 2021-09-29 Modified: 2026-06-17

Description

Acrobat Pro DC versions 2021.005.20060 (and earlier), 2020.004.30006 (and earlier) and 2017.011.30199 (and earlier) are affected by a Null pointer dereference vulnerability. An unauthenticated attacker could leverage this vulnerability to disclose sensitive user memory. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Affected Platforms

Adobe AcrobatMicrosoft WindowsAdobe Acrobat ReaderAdobe Acrobat Reader DcAdobe Acrobat DcApple Macos

Weakness Type

CWE-476

References