CVE-2021-28559

5.3 mediumEPSS 1.6%

Medium (5.3) in adobe. EPSS 1.6% chance of exploitation in the next 30 days.

Acrobat Reader DC versions versions 2021.001.20150 (and earlier), 2020.001.30020 (and earlier) and 2017.011.30194 (and earlier) are affected by an Information Exposure vulnerability. An unauthenticated attacker could leverage this vulnerability to get access to restricted data stored within global variables and objects.

Severity

CVSS 3.1

5.3 medium

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

EPSS: 1.6% chance of exploitation in the next 30 days; higher than 76% of CVEs (scores of 2026-10-31)
CWE: CWE-359
Published: 2021-09-02
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

adobe:acrobat
adobe:acrobat_dc
adobe:acrobat_reader
adobe:acrobat_reader_dc

References

https://helpx.adobe.com/security/products/acrobat/apsb21-29.html
https://helpx.adobe.com/security/products/acrobat/apsb21-29.html

Check your stack JSON