CVE-2021-21089

Acrobat Reader DC versions versions 2020.013.20074 (and earlier), 2020.001.30018 (and earlier) and 2017.011.30188 (and earlier) are affected by an out-of-bounds Read vulnerability. An unauthenticated attacker could leverage this vulnerability to locally escalate privileges in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

• CWE-125

• https://helpx.adobe.com/security/products/acrobat/apsb21-09.htmlRelease Notes, Vendor Advisory
• https://helpx.adobe.com/security/products/acrobat/apsb21-09.htmlRelease Notes, Vendor Advisory

Published

Sep 30, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-21083AEM's Cloud Service offering, as well as versions 6.5.7.0 (a…7.5
• CVE-2021-21084AEM's Cloud Service offering, as well as versions 6.5.7.0 (a…6.1
• CVE-2021-21085Adobe Connect version 11.0.7 (and earlier) is affected by an…7.8
• CVE-2021-21086Acrobat Reader DC versions versions 2020.013.20074 (and earl…7.8
• CVE-2021-21087Adobe Coldfusion versions 2016 (update 16 and earlier), 2018…5.4
• CVE-2021-21088Acrobat Reader DC versions versions 2020.013.20074 (and earl…7.8
• CVE-2021-2109Vulnerability in the Oracle WebLogic Server product of Oracl…7.2
• CVE-2021-21090Adobe InCopy version 16.0 (and earlier) is affected by an pa…8.8
• CVE-2021-21091Adobe Bridge versions 10.1.1 (and earlier) and 11.0.1 (and e…3.3
• CVE-2021-21092Adobe Bridge versions 10.1.1 (and earlier) and 11.0.1 (and e…7.8
• CVE-2021-21093Adobe Bridge versions 10.1.1 (and earlier) and 11.0.1 (and e…7.8
• CVE-2021-21094Adobe Bridge versions 10.1.1 (and earlier) and 11.0.1 (and e…7.8