CVE-2021-44714 : Acrobat Reader DC version 21.007.20099 (and earlier), 20.004.30017 (and earlier) and 17.011.30204 (and earlier) are affe

Acrobat Reader DC version 21.007.20099 (and earlier), 20.004.30017 (and earlier) and 17.011.30204 (and earlier) are affected by a Violation of Secure Design Principles that could lead to a Security feature bypass. Acrobat Reader DC displays a warning message when a user clicks on a PDF file, which could be used by an attacker to mislead the user. In affected versions, this warning message does not include custom protocols when used by the sender. User interaction is required to abuse this vulnerability as they would need to click 'allow' on the warning message of a malicious file.

Published 2022-01-14 20:15:13

Updated 2022-01-21 20:55:17

Source Adobe Systems Incorporated

View at NVD, CVE.org

Exploit prediction scoring system (EPSS) score for CVE-2021-44714

EPSS FAQ

0.07%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 30 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2021-44714

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
4.3	MEDIUM	AV:N/AC:M/Au:N/C:P/I:N/A:N	8.6	2.9	NIST
Access Vector: Network Access Complexity: Medium Authentication: None Confidentiality Impact: Partial Integrity Impact: None Availability Impact: None
3.3	LOW	CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N	1.8	1.4	NIST
Attack Vector: Local Attack Complexity: Low Privileges Required: None User Interaction: Required Scope: Unchanged Confidentiality: Low Integrity: None Availability: None
2.5	LOW	CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N	1.0	1.4	Adobe Systems Incorporated
Attack Vector: Local Attack Complexity: High Privileges Required: None User Interaction: Required Scope: Unchanged Confidentiality: Low Integrity: None Availability: None

Products affected by CVE-2021-44714

Adobe » Acrobat Reader » Classic Edition
Versions from including (>=) 17.011.30059 and up to, including, (<=) 17.011.30204
cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:classic:*:*:*
Matching versions
When used together with: Apple » Macos » Version: N/A
When used together with: Microsoft » Windows » Version: N/A
Adobe » Acrobat Reader » Classic Edition
Versions from including (>=) 20.001.30005 and up to, including, (<=) 20.004.30017
cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:classic:*:*:*
Matching versions
When used together with: Apple » Macos » Version: N/A
When used together with: Microsoft » Windows » Version: N/A
Adobe » Acrobat » Classic Edition
Versions from including (>=) 17.011.30059 and up to, including, (<=) 17.011.30204
cpe:2.3:a:adobe:acrobat:*:*:*:*:classic:*:*:*
Matching versions
When used together with: Apple » Macos » Version: N/A
When used together with: Microsoft » Windows » Version: N/A
Adobe » Acrobat » Classic Edition
Versions from including (>=) 20.001.30005 and up to, including, (<=) 20.004.30017
cpe:2.3:a:adobe:acrobat:*:*:*:*:classic:*:*:*
Matching versions
When used together with: Apple » Macos » Version: N/A
When used together with: Microsoft » Windows » Version: N/A
Adobe » Acrobat Dc » Continuous Edition
Versions from including (>=) 15.008.20082 and up to, including, (<=) 21.007.20099
cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*
Matching versions
When used together with: Microsoft » Windows » Version: N/A
Adobe » Acrobat Reader Dc » Continuous Edition
Versions from including (>=) 15.008.20082 and up to, including, (<=) 21.007.20099
cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*
Matching versions
When used together with: Microsoft » Windows » Version: N/A

Vulnerability Details : CVE-2021-44714

Exploit prediction scoring system (EPSS) score for CVE-2021-44714

CVSS scores for CVE-2021-44714

CWE ids for CVE-2021-44714

References for CVE-2021-44714

Products affected by CVE-2021-44714