CVE-2021-40730

Adobe Acrobat Reader DC JPEG2000 Parsing Use-After-Free Information Disclosure Vulnerability

State
Published
Severity
3.3 Low
Published
Oct 15, 2021
Updated
Apr 23, 2025
Reserved
Sep 8, 2021

Read the record on cve.org

Description

Adobe Acrobat Reader DC version 21.007.20095 (and earlier), 21.007.20096 (and earlier), 20.004.30015 (and earlier), and 17.011.30202 (and earlier) is affected by a use-after-free that allow a remote attacker to disclose sensitive information on affected installations of of Adobe Acrobat Reader DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of JPG2000 images.

Scores

CVSSScoreVectorSource
3.03.3 LowCVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:Nadobe

Weaknesses

Affected Products

ProductVersions
Acrobat ReaderAdobe
  • 21.007.20095 and earlierAffected
  • 21.007.20096 and earlierAffected
  • 20.004.30015 and earlierAffected
  • 17.011.30202 and earlierAffected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.