Exposures › CVE-2021-28550

CVE-2021-28550

Severity
high · on CISA KEV actively exploited
Source
CISA-KEV · kev
Published
2021-11-03
Reference
⚡ RCE ⌖ exploited in the wild shame 65/100 rceexploited-in-wild

Adobe Acrobat and Reader contains a use-after-free vulnerability that could allow an unauthenticated attacker to achieve code execution in the context of the current user.

Players implicated

Adobe · vendorAcrobat and Reader · product

Description

Adobe Acrobat and Reader contains a use-after-free vulnerability that could allow an unauthenticated attacker to achieve code execution in the context of the current user.

Sentiment · trusted sources

  • synthesis neutral +0.00
    No sentiment expressed; sources are technical databases or vendor pages without commentary on Adobe's handling.
  • cooey ↗ neutral +0.00
    Neutral; technical description only.
    “Adobe Acrobat and Reader contains a use-after-free vulnerability that could allow an unauthenticated attacker to achieve code execution in the context of the current user.”
  • www.cvefind.com ↗ neutral +0.00
    Neutral; no commentary on Adobe.
  • app.opencve.io ↗ neutral +0.00
    Neutral; no commentary on Adobe.
  • cvefeed.io ↗ neutral +0.00
    Neutral; no commentary on Adobe.
  • SentinelOne ↗ neutral +0.00
    Neutral; no commentary on Adobe.

Affected FedRAMP products 8 in the catalog

ProductProviderStatusMatch
Adobe Acrobat Sign for Government Adobe Authorized vendor-exact · 0.90
Adobe Analytics Adobe Authorized vendor-exact · 0.90
Adobe Campaign Adobe Authorized vendor-exact · 0.90
Adobe Connect Managed Services (ACMS-GC) Adobe Authorized vendor-exact · 0.90
Adobe Creative Cloud for Enterprise Adobe Authorized vendor-exact · 0.90
Adobe Document Cloud (PDF Services & Adobe Sign) Adobe Authorized vendor-exact · 0.90
Adobe Experience Manager Managed Services (AEMMS-GC) Adobe Authorized vendor-exact · 0.90
Adobe Learning Manager Adobe Authorized vendor-exact · 0.90