Search

Find a vulnerability

Search criteria ⓘ Use this form to refine search results.
Full-text search supports keyword queries with ranking and filtering.
You can combine vendor, product, and sources to narrow results.
Enable “Apply ordering” to sort by date instead of relevance.

    2 vulnerabilities found for acrobat_reader_2020 by adobe

    CVE-2021-21045 (GCVE-0-2021-21045)

    Vulnerability from cvelistv5 – Published: 2021-02-11 19:42 – Updated: 2024-09-16 21:07
    VLAI
    Title
    Acrobat Reader DC Improper Installer Access Control Vulnerability Could Lead To Privilege Escalation
    Summary
    Acrobat Reader DC versions versions 2020.013.20074 (and earlier), 2020.001.30018 (and earlier) and 2017.011.30188 (and earlier) are affected by an improper access control vulnerability. An unauthenticated attacker could leverage this vulnerability to elevate privileges in the context of the current user.
    SSVC
    Exploitation: none Automatable: no Technical Impact: total
    CISA Coordinator · CISA-ADP (v2.0.3)
    Decision recorded 2024-08-22 16:30 UTC
    CWE
    • CWE-284 - Improper Access Control (CWE-284)
    References
    Impacted products
    Vendor Product Version
    Adobe Acrobat Reader Affected: unspecified , ≤ 2020.013.20074 (custom)
    Affected: unspecified , ≤ 2020.001.30018 (custom)
    Affected: unspecified , ≤ 2017.011.30188 (custom)
    Affected: unspecified , ≤ None (custom)
    Create a notification for this product.
    adobe acrobat_reader_2017 Affected: 17.0 , ≤ 17.011.30188 (custom)
        cpe:2.3:a:adobe:acrobat_reader_2017:*:*:*:*:*:*:*:*
    Create a notification for this product.
    adobe acrobat_2017 Affected: 17.0 , ≤ 17.011.30188 (custom)
        cpe:2.3:a:adobe:acrobat_2017:*:*:*:*:*:*:*:*
    Create a notification for this product.
    adobe acrobat_reader_2020 Affected: 20.0 , ≤ 20.001.30018 (custom)
        cpe:2.3:a:adobe:acrobat_reader_2020:*:*:*:*:*:*:*:*
    Create a notification for this product.
    adobe acrobat_2020 Affected: 20.0 , ≤ 20.001.30018 (custom)
        cpe:2.3:a:adobe:acrobat_2020:*:*:*:*:*:*:*:*
    Create a notification for this product.
    adobe acrobat_reader_dc Affected: 0 , ≤ 20.013.20074 (custom)
        cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:windows:*:*
    Create a notification for this product.
    adobe acrobat_reader_dc Affected: 0 , ≤ 20.013.20074 (custom)
        cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:macos:*:*
    Create a notification for this product.
    adobe acrobat_dc Affected: 0 , < 20.013.20074 (custom)
        cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:*:macos:*:*
    Create a notification for this product.
    adobe acrobat_dc Affected: 0 , < 20.013.20074 (custom)
        cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:*:windows:*:*
    Create a notification for this product.
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "providerMetadata": {
              "dateUpdated": "2024-08-03T18:01:12.607Z",
              "orgId": "af854a3a-2127-422b-91ae-364da2661108",
              "shortName": "CVE"
            },
            "references": [
              {
                "tags": [
                  "x_refsource_MISC",
                  "x_transferred"
                ],
                "url": "https://helpx.adobe.com/security/products/acrobat/apsb21-09.html"
              }
            ],
            "title": "CVE Program Container"
          },
          {
            "affected": [
              {
                "cpes": [
                  "cpe:2.3:a:adobe:acrobat_reader_2017:*:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unknown",
                "product": "acrobat_reader_2017",
                "vendor": "adobe",
                "versions": [
                  {
                    "lessThanOrEqual": "17.011.30188",
                    "status": "affected",
                    "version": "17.0",
                    "versionType": "custom"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:a:adobe:acrobat_2017:*:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unknown",
                "product": "acrobat_2017",
                "vendor": "adobe",
                "versions": [
                  {
                    "lessThanOrEqual": "17.011.30188",
                    "status": "affected",
                    "version": "17.0",
                    "versionType": "custom"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:a:adobe:acrobat_reader_2020:*:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unknown",
                "product": "acrobat_reader_2020",
                "vendor": "adobe",
                "versions": [
                  {
                    "lessThanOrEqual": "20.001.30018",
                    "status": "affected",
                    "version": "20.0",
                    "versionType": "custom"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:a:adobe:acrobat_2020:*:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unknown",
                "product": "acrobat_2020",
                "vendor": "adobe",
                "versions": [
                  {
                    "lessThanOrEqual": "20.001.30018",
                    "status": "affected",
                    "version": "20.0",
                    "versionType": "custom"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:windows:*:*"
                ],
                "defaultStatus": "unknown",
                "product": "acrobat_reader_dc",
                "vendor": "adobe",
                "versions": [
                  {
                    "lessThanOrEqual": "20.013.20074",
                    "status": "affected",
                    "version": "0",
                    "versionType": "custom"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:macos:*:*"
                ],
                "defaultStatus": "unknown",
                "product": "acrobat_reader_dc",
                "vendor": "adobe",
                "versions": [
                  {
                    "lessThanOrEqual": "20.013.20074",
                    "status": "affected",
                    "version": "0",
                    "versionType": "custom"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:*:macos:*:*"
                ],
                "defaultStatus": "unknown",
                "product": "acrobat_dc",
                "vendor": "adobe",
                "versions": [
                  {
                    "lessThan": "20.013.20074",
                    "status": "affected",
                    "version": "0",
                    "versionType": "custom"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:*:windows:*:*"
                ],
                "defaultStatus": "unknown",
                "product": "acrobat_dc",
                "vendor": "adobe",
                "versions": [
                  {
                    "lessThan": "20.013.20074",
                    "status": "affected",
                    "version": "0",
                    "versionType": "custom"
                  }
                ]
              }
            ],
            "metrics": [
              {
                "other": {
                  "content": {
                    "id": "CVE-2021-21045",
                    "options": [
                      {
                        "Exploitation": "none"
                      },
                      {
                        "Automatable": "no"
                      },
                      {
                        "Technical Impact": "total"
                      }
                    ],
                    "role": "CISA Coordinator",
                    "timestamp": "2024-08-22T16:30:57.861562Z",
                    "version": "2.0.3"
                  },
                  "type": "ssvc"
                }
              }
            ],
            "providerMetadata": {
              "dateUpdated": "2024-08-22T16:39:45.881Z",
              "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "shortName": "CISA-ADP"
            },
            "title": "CISA ADP Vulnrichment"
          }
        ],
        "cna": {
          "affected": [
            {
              "product": "Acrobat Reader",
              "vendor": "Adobe",
              "versions": [
                {
                  "lessThanOrEqual": "2020.013.20074",
                  "status": "affected",
                  "version": "unspecified",
                  "versionType": "custom"
                },
                {
                  "lessThanOrEqual": "2020.001.30018",
                  "status": "affected",
                  "version": "unspecified",
                  "versionType": "custom"
                },
                {
                  "lessThanOrEqual": "2017.011.30188",
                  "status": "affected",
                  "version": "unspecified",
                  "versionType": "custom"
                },
                {
                  "lessThanOrEqual": "None",
                  "status": "affected",
                  "version": "unspecified",
                  "versionType": "custom"
                }
              ]
            }
          ],
          "descriptions": [
            {
              "lang": "en",
              "value": "Acrobat Reader DC versions versions 2020.013.20074 (and earlier), 2020.001.30018 (and earlier) and 2017.011.30188 (and earlier) are affected by an improper access control vulnerability. An unauthenticated attacker could leverage this vulnerability to elevate privileges in the context of the current user."
            }
          ],
          "metrics": [
            {
              "cvssV3_1": {
                "attackComplexity": "LOW",
                "attackVector": "LOCAL",
                "availabilityImpact": "HIGH",
                "baseScore": 8.2,
                "baseSeverity": "HIGH",
                "confidentialityImpact": "HIGH",
                "integrityImpact": "HIGH",
                "privilegesRequired": "LOW",
                "scope": "CHANGED",
                "userInteraction": "REQUIRED",
                "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H",
                "version": "3.1"
              }
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "cweId": "CWE-284",
                  "description": "Improper Access Control (CWE-284)",
                  "lang": "en",
                  "type": "CWE"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2021-02-11T19:42:20.000Z",
            "orgId": "078d4453-3bcd-4900-85e6-15281da43538",
            "shortName": "adobe"
          },
          "references": [
            {
              "tags": [
                "x_refsource_MISC"
              ],
              "url": "https://helpx.adobe.com/security/products/acrobat/apsb21-09.html"
            }
          ],
          "source": {
            "discovery": "EXTERNAL"
          },
          "title": "Acrobat Reader DC Improper Installer Access Control Vulnerability Could Lead To Privilege Escalation",
          "x_ConverterErrors": {
            "DATE_PUBLIC": {
              "error": "v4 DATE_PUBLIC is invalid",
              "message": "(\u0027Unknown string format:\u0027, \u0027NoneT23:00:00.000Z\u0027)"
            }
          },
          "x_legacyV4Record": {
            "CVE_data_meta": {
              "ASSIGNER": "psirt@adobe.com",
              "DATE_PUBLIC": "NoneT23:00:00.000Z",
              "ID": "CVE-2021-21045",
              "STATE": "PUBLIC",
              "TITLE": "Acrobat Reader DC Improper Installer Access Control Vulnerability Could Lead To Privilege Escalation"
            },
            "affects": {
              "vendor": {
                "vendor_data": [
                  {
                    "product": {
                      "product_data": [
                        {
                          "product_name": "Acrobat Reader",
                          "version": {
                            "version_data": [
                              {
                                "version_affected": "\u003c=",
                                "version_value": "2020.013.20074"
                              },
                              {
                                "version_affected": "\u003c=",
                                "version_value": "2020.001.30018"
                              },
                              {
                                "version_affected": "\u003c=",
                                "version_value": "2017.011.30188"
                              },
                              {
                                "version_affected": "\u003c=",
                                "version_value": "None"
                              }
                            ]
                          }
                        }
                      ]
                    },
                    "vendor_name": "Adobe"
                  }
                ]
              }
            },
            "data_format": "MITRE",
            "data_type": "CVE",
            "data_version": "4.0",
            "description": {
              "description_data": [
                {
                  "lang": "eng",
                  "value": "Acrobat Reader DC versions versions 2020.013.20074 (and earlier), 2020.001.30018 (and earlier) and 2017.011.30188 (and earlier) are affected by an improper access control vulnerability. An unauthenticated attacker could leverage this vulnerability to elevate privileges in the context of the current user."
                }
              ]
            },
            "impact": {
              "cvss": {
                "attackComplexity": "None",
                "attackVector": "None",
                "availabilityImpact": "None",
                "baseScore": 8.2,
                "baseSeverity": "High",
                "confidentialityImpact": "None",
                "integrityImpact": "None",
                "privilegesRequired": "None",
                "scope": "None",
                "userInteraction": "None",
                "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H",
                "version": "3.1"
              }
            },
            "problemtype": {
              "problemtype_data": [
                {
                  "description": [
                    {
                      "lang": "eng",
                      "value": "Improper Access Control (CWE-284)"
                    }
                  ]
                }
              ]
            },
            "references": {
              "reference_data": [
                {
                  "name": "https://helpx.adobe.com/security/products/acrobat/apsb21-09.html",
                  "refsource": "MISC",
                  "url": "https://helpx.adobe.com/security/products/acrobat/apsb21-09.html"
                }
              ]
            },
            "source": {
              "discovery": "EXTERNAL"
            }
          }
        }
      },
      "cveMetadata": {
        "assignerOrgId": "078d4453-3bcd-4900-85e6-15281da43538",
        "assignerShortName": "adobe",
        "cveId": "CVE-2021-21045",
        "datePublished": "2021-02-11T19:42:20.339Z",
        "dateReserved": "2020-12-18T00:00:00.000Z",
        "dateUpdated": "2024-09-16T21:07:41.363Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.1"
    }

    CVE-2021-21045 (GCVE-0-2021-21045)

    Vulnerability from nvd – Published: 2021-02-11 19:42 – Updated: 2024-09-16 21:07
    VLAI
    Title
    Acrobat Reader DC Improper Installer Access Control Vulnerability Could Lead To Privilege Escalation
    Summary
    Acrobat Reader DC versions versions 2020.013.20074 (and earlier), 2020.001.30018 (and earlier) and 2017.011.30188 (and earlier) are affected by an improper access control vulnerability. An unauthenticated attacker could leverage this vulnerability to elevate privileges in the context of the current user.
    SSVC
    Exploitation: none Automatable: no Technical Impact: total
    CISA Coordinator · CISA-ADP (v2.0.3)
    Decision recorded 2024-08-22 16:30 UTC
    CWE
    • CWE-284 - Improper Access Control (CWE-284)
    References
    Impacted products
    Vendor Product Version
    Adobe Acrobat Reader Affected: unspecified , ≤ 2020.013.20074 (custom)
    Affected: unspecified , ≤ 2020.001.30018 (custom)
    Affected: unspecified , ≤ 2017.011.30188 (custom)
    Affected: unspecified , ≤ None (custom)
    Create a notification for this product.
    adobe acrobat_reader_2017 Affected: 17.0 , ≤ 17.011.30188 (custom)
        cpe:2.3:a:adobe:acrobat_reader_2017:*:*:*:*:*:*:*:*
    Create a notification for this product.
    adobe acrobat_2017 Affected: 17.0 , ≤ 17.011.30188 (custom)
        cpe:2.3:a:adobe:acrobat_2017:*:*:*:*:*:*:*:*
    Create a notification for this product.
    adobe acrobat_reader_2020 Affected: 20.0 , ≤ 20.001.30018 (custom)
        cpe:2.3:a:adobe:acrobat_reader_2020:*:*:*:*:*:*:*:*
    Create a notification for this product.
    adobe acrobat_2020 Affected: 20.0 , ≤ 20.001.30018 (custom)
        cpe:2.3:a:adobe:acrobat_2020:*:*:*:*:*:*:*:*
    Create a notification for this product.
    adobe acrobat_reader_dc Affected: 0 , ≤ 20.013.20074 (custom)
        cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:windows:*:*
    Create a notification for this product.
    adobe acrobat_reader_dc Affected: 0 , ≤ 20.013.20074 (custom)
        cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:macos:*:*
    Create a notification for this product.
    adobe acrobat_dc Affected: 0 , < 20.013.20074 (custom)
        cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:*:macos:*:*
    Create a notification for this product.
    adobe acrobat_dc Affected: 0 , < 20.013.20074 (custom)
        cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:*:windows:*:*
    Create a notification for this product.
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "providerMetadata": {
              "dateUpdated": "2024-08-03T18:01:12.607Z",
              "orgId": "af854a3a-2127-422b-91ae-364da2661108",
              "shortName": "CVE"
            },
            "references": [
              {
                "tags": [
                  "x_refsource_MISC",
                  "x_transferred"
                ],
                "url": "https://helpx.adobe.com/security/products/acrobat/apsb21-09.html"
              }
            ],
            "title": "CVE Program Container"
          },
          {
            "affected": [
              {
                "cpes": [
                  "cpe:2.3:a:adobe:acrobat_reader_2017:*:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unknown",
                "product": "acrobat_reader_2017",
                "vendor": "adobe",
                "versions": [
                  {
                    "lessThanOrEqual": "17.011.30188",
                    "status": "affected",
                    "version": "17.0",
                    "versionType": "custom"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:a:adobe:acrobat_2017:*:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unknown",
                "product": "acrobat_2017",
                "vendor": "adobe",
                "versions": [
                  {
                    "lessThanOrEqual": "17.011.30188",
                    "status": "affected",
                    "version": "17.0",
                    "versionType": "custom"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:a:adobe:acrobat_reader_2020:*:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unknown",
                "product": "acrobat_reader_2020",
                "vendor": "adobe",
                "versions": [
                  {
                    "lessThanOrEqual": "20.001.30018",
                    "status": "affected",
                    "version": "20.0",
                    "versionType": "custom"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:a:adobe:acrobat_2020:*:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unknown",
                "product": "acrobat_2020",
                "vendor": "adobe",
                "versions": [
                  {
                    "lessThanOrEqual": "20.001.30018",
                    "status": "affected",
                    "version": "20.0",
                    "versionType": "custom"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:windows:*:*"
                ],
                "defaultStatus": "unknown",
                "product": "acrobat_reader_dc",
                "vendor": "adobe",
                "versions": [
                  {
                    "lessThanOrEqual": "20.013.20074",
                    "status": "affected",
                    "version": "0",
                    "versionType": "custom"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:macos:*:*"
                ],
                "defaultStatus": "unknown",
                "product": "acrobat_reader_dc",
                "vendor": "adobe",
                "versions": [
                  {
                    "lessThanOrEqual": "20.013.20074",
                    "status": "affected",
                    "version": "0",
                    "versionType": "custom"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:*:macos:*:*"
                ],
                "defaultStatus": "unknown",
                "product": "acrobat_dc",
                "vendor": "adobe",
                "versions": [
                  {
                    "lessThan": "20.013.20074",
                    "status": "affected",
                    "version": "0",
                    "versionType": "custom"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:*:windows:*:*"
                ],
                "defaultStatus": "unknown",
                "product": "acrobat_dc",
                "vendor": "adobe",
                "versions": [
                  {
                    "lessThan": "20.013.20074",
                    "status": "affected",
                    "version": "0",
                    "versionType": "custom"
                  }
                ]
              }
            ],
            "metrics": [
              {
                "other": {
                  "content": {
                    "id": "CVE-2021-21045",
                    "options": [
                      {
                        "Exploitation": "none"
                      },
                      {
                        "Automatable": "no"
                      },
                      {
                        "Technical Impact": "total"
                      }
                    ],
                    "role": "CISA Coordinator",
                    "timestamp": "2024-08-22T16:30:57.861562Z",
                    "version": "2.0.3"
                  },
                  "type": "ssvc"
                }
              }
            ],
            "providerMetadata": {
              "dateUpdated": "2024-08-22T16:39:45.881Z",
              "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "shortName": "CISA-ADP"
            },
            "title": "CISA ADP Vulnrichment"
          }
        ],
        "cna": {
          "affected": [
            {
              "product": "Acrobat Reader",
              "vendor": "Adobe",
              "versions": [
                {
                  "lessThanOrEqual": "2020.013.20074",
                  "status": "affected",
                  "version": "unspecified",
                  "versionType": "custom"
                },
                {
                  "lessThanOrEqual": "2020.001.30018",
                  "status": "affected",
                  "version": "unspecified",
                  "versionType": "custom"
                },
                {
                  "lessThanOrEqual": "2017.011.30188",
                  "status": "affected",
                  "version": "unspecified",
                  "versionType": "custom"
                },
                {
                  "lessThanOrEqual": "None",
                  "status": "affected",
                  "version": "unspecified",
                  "versionType": "custom"
                }
              ]
            }
          ],
          "descriptions": [
            {
              "lang": "en",
              "value": "Acrobat Reader DC versions versions 2020.013.20074 (and earlier), 2020.001.30018 (and earlier) and 2017.011.30188 (and earlier) are affected by an improper access control vulnerability. An unauthenticated attacker could leverage this vulnerability to elevate privileges in the context of the current user."
            }
          ],
          "metrics": [
            {
              "cvssV3_1": {
                "attackComplexity": "LOW",
                "attackVector": "LOCAL",
                "availabilityImpact": "HIGH",
                "baseScore": 8.2,
                "baseSeverity": "HIGH",
                "confidentialityImpact": "HIGH",
                "integrityImpact": "HIGH",
                "privilegesRequired": "LOW",
                "scope": "CHANGED",
                "userInteraction": "REQUIRED",
                "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H",
                "version": "3.1"
              }
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "cweId": "CWE-284",
                  "description": "Improper Access Control (CWE-284)",
                  "lang": "en",
                  "type": "CWE"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2021-02-11T19:42:20.000Z",
            "orgId": "078d4453-3bcd-4900-85e6-15281da43538",
            "shortName": "adobe"
          },
          "references": [
            {
              "tags": [
                "x_refsource_MISC"
              ],
              "url": "https://helpx.adobe.com/security/products/acrobat/apsb21-09.html"
            }
          ],
          "source": {
            "discovery": "EXTERNAL"
          },
          "title": "Acrobat Reader DC Improper Installer Access Control Vulnerability Could Lead To Privilege Escalation",
          "x_ConverterErrors": {
            "DATE_PUBLIC": {
              "error": "v4 DATE_PUBLIC is invalid",
              "message": "(\u0027Unknown string format:\u0027, \u0027NoneT23:00:00.000Z\u0027)"
            }
          },
          "x_legacyV4Record": {
            "CVE_data_meta": {
              "ASSIGNER": "psirt@adobe.com",
              "DATE_PUBLIC": "NoneT23:00:00.000Z",
              "ID": "CVE-2021-21045",
              "STATE": "PUBLIC",
              "TITLE": "Acrobat Reader DC Improper Installer Access Control Vulnerability Could Lead To Privilege Escalation"
            },
            "affects": {
              "vendor": {
                "vendor_data": [
                  {
                    "product": {
                      "product_data": [
                        {
                          "product_name": "Acrobat Reader",
                          "version": {
                            "version_data": [
                              {
                                "version_affected": "\u003c=",
                                "version_value": "2020.013.20074"
                              },
                              {
                                "version_affected": "\u003c=",
                                "version_value": "2020.001.30018"
                              },
                              {
                                "version_affected": "\u003c=",
                                "version_value": "2017.011.30188"
                              },
                              {
                                "version_affected": "\u003c=",
                                "version_value": "None"
                              }
                            ]
                          }
                        }
                      ]
                    },
                    "vendor_name": "Adobe"
                  }
                ]
              }
            },
            "data_format": "MITRE",
            "data_type": "CVE",
            "data_version": "4.0",
            "description": {
              "description_data": [
                {
                  "lang": "eng",
                  "value": "Acrobat Reader DC versions versions 2020.013.20074 (and earlier), 2020.001.30018 (and earlier) and 2017.011.30188 (and earlier) are affected by an improper access control vulnerability. An unauthenticated attacker could leverage this vulnerability to elevate privileges in the context of the current user."
                }
              ]
            },
            "impact": {
              "cvss": {
                "attackComplexity": "None",
                "attackVector": "None",
                "availabilityImpact": "None",
                "baseScore": 8.2,
                "baseSeverity": "High",
                "confidentialityImpact": "None",
                "integrityImpact": "None",
                "privilegesRequired": "None",
                "scope": "None",
                "userInteraction": "None",
                "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H",
                "version": "3.1"
              }
            },
            "problemtype": {
              "problemtype_data": [
                {
                  "description": [
                    {
                      "lang": "eng",
                      "value": "Improper Access Control (CWE-284)"
                    }
                  ]
                }
              ]
            },
            "references": {
              "reference_data": [
                {
                  "name": "https://helpx.adobe.com/security/products/acrobat/apsb21-09.html",
                  "refsource": "MISC",
                  "url": "https://helpx.adobe.com/security/products/acrobat/apsb21-09.html"
                }
              ]
            },
            "source": {
              "discovery": "EXTERNAL"
            }
          }
        }
      },
      "cveMetadata": {
        "assignerOrgId": "078d4453-3bcd-4900-85e6-15281da43538",
        "assignerShortName": "adobe",
        "cveId": "CVE-2021-21045",
        "datePublished": "2021-02-11T19:42:20.339Z",
        "dateReserved": "2020-12-18T00:00:00.000Z",
        "dateUpdated": "2024-09-16T21:07:41.363Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.1"
    }