CVE-2021-35984

6.5 mediumEPSS 1.8%

Medium (6.5) in adobe. EPSS 1.8% chance of exploitation in the next 30 days.

Acrobat Reader DC versions 2021.005.20054 (and earlier), 2020.004.30005 (and earlier) and 2017.011.30197 (and earlier) are affected by a Null pointer dereference vulnerability. An authenticated attacker could leverage this vulnerability achieve an application denial-of-service in the context of the current user. Exploitation of this issue does not requires user interaction.

Severity

CVSS 3.1

6.5 medium

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

EPSS: 1.8% chance of exploitation in the next 30 days; higher than 78% of CVEs (scores of 2026-10-31)
CWE: CWE-476
Published: 2021-08-20
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

adobe:acrobat_dc
adobe:acrobat_reader_dc

References

https://helpx.adobe.com/security/products/acrobat/apsb21-51.html
https://helpx.adobe.com/security/products/acrobat/apsb21-51.html

Check your stack JSON