HIGH🇵🇱 Wersja polska

CVE-2021-28545

CVSS 8.1v3.1pub. 2021-04-01upd. 2024-11-21

Acrobat Reader DC versions versions 2020.013.20074 (and earlier), 2020.001.30018 (and earlier) and 2017.011.30188 (and earlier) are missing support for an integrity check. An unauthenticated attacker would have the ability to completely manipulate data in a certified PDF without invalidating the original certification. Exploitation of this issue requires user interaction in that a victim must open the tampered file.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N

  • Adobe Acrobat

    APP
    Adobe
    17.011.30059 – 17.011.3018820.001.30005 – 20.001.30018

  • Adobe Acrobat DC

    APP
    Adobe
    15.008.20082 – 20.013.20074

  • Adobe Acrobat Reader

    APP
    Adobe
    17.011.30059 – 17.011.3018820.001.30005 – 20.001.30018

  • Adobe Acrobat Reader Dc

    APP
    Adobe
    15.008.20082 – 20.013.20074

  • Apple macOS

    OS
    Apple
    all versions

  • Microsoft Windows

    OS
    Microsoft
    all versions
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
Auth Bypass
CWE
References

Related vulnerabilities

CVE-2026-65400CRITICAL9.8⚠ KEVPL ✓same product

Pominięcie uwierzytelniania w Screen Sharing na macOS

CVE-2026-8398CRITICAL9.3⚠ KEVPL ✓same product

Atak na łańcuch dostaw DAEMON Tools Lite — trojanizacja instalatorów

CVE-2025-10585CRITICAL9.8⚠ KEVPL ✓same product

Type confusion w V8 (Google Chrome) — zdalne uszkodzenie sterty

CVE-2025-43300CRITICAL10.0⚠ KEVPL ✓same product

Apple iOS/iPadOS/macOS — out-of-bounds write przy przetwarzaniu obrazu

CVE-2025-34028CRITICAL9.3⚠ KEVPL ✓same product

Commvault Command Center – nieuwierzytelniony RCE przez path traversal w ZIP