VYPR
← All advisories
Medium severity6.5NVD Advisory· Published Sep 29, 2021· Updated Jun 17, 2026

CVE-2021-39856

CVE-2021-39856

Description

Acrobat Reader DC ActiveX Control versions 2021.005.20060 (and earlier), 2020.004.30006 (and earlier) and 2017.011.30199 (and earlier) are affected by an Information Disclosure vulnerability. An unauthenticated attacker could leverage this vulnerability to obtain NTLMv2 credentials. Exploitation of this issue requires user interaction in that a victim must visit an attacker controlled web page.

Affected products

6
  • Adobe Inc./Acrobat Reader Dcllm-fuzzy2 versions
    <=2021.005.20060, <=2020.004.30006, <=2017.011.30199+ 1 more
    • (no CPE)range: <=2021.005.20060, <=2020.004.30006, <=2017.011.30199
    • cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*range: >=15.008.20082,<=21.005.20058
  • Adobe Inc./Acrobatcpe-rescue4 versions
    unspecified+ 3 more
    • (no CPE)range: unspecified
    • cpe:2.3:a:adobe:acrobat:*:*:*:*:classic:*:*:*range: >=17.011.30059,<=17.011.30199
    • cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:classic:*:*:*range: >=17.011.30059,<=17.011.30199
    • cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*range: >=15.008.20082,<=21.005.20058

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.