CVE-2021-21017

Adobe Acrobat and Reader suffered a heap-based buffer overflow allowing unauthenticated remote code execution, a known critical flaw repeatedly exploited in the wild.

The heap-based buffer overflow in Adobe Acrobat and Reader allowed unauthenticated attackers to execute arbitrary code as the current user, directly enabling ransomware and data exfiltration. DIB organizations must enforce strict patching cycles and consider alternative PDF readers for untrusted content, as Adobe's repeated critical RCE vulnerabilities demonstrate a high-risk posture that undermines supply-chain trust.

Shame score — Adobe repeatedly ships critical RCE vulnerabilities that are actively exploited in the wild, demonstrating a pattern of negligence and a high-risk track record that severely damages trust in their software supply chain.