CVE-2021-44714

Acrobat Reader DC version 21.007.20099 (and earlier), 20.004.30017 (and earlier) and 17.011.30204 (and earlier) are affected by a Violation of Secure Design Principles that could lead to a Security feature bypass. Acrobat Reader DC displays a warning message when a user clicks on a PDF file, which could be used by an attacker to mislead the user. In affected versions, this warning message does not include custom protocols when used by the sender. User interaction is required to abuse this vulnerability as they would need to click 'allow' on the warning message of a malicious file.

• CWE-657

• https://helpx.adobe.com/security/products/acrobat/apsb22-01.htmlVendor Advisory
• https://helpx.adobe.com/security/products/acrobat/apsb22-01.htmlVendor Advisory

Published

Jan 14, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-44709Acrobat Reader DC version 21.007.20099 (and earlier), 20.004…7.8
• CVE-2021-4471TG8 Firewall exposes a directory such as /data/ over HTTP wi…8.7
• CVE-2021-44710Acrobat Reader DC version 21.007.20099 (and earlier), 20.004…7.8
• CVE-2021-44711Acrobat Reader DC version 21.007.20099 (and earlier), 20.004…7.8
• CVE-2021-44712Acrobat Reader DC version 21.007.20099 (and earlier), 20.004…5.5
• CVE-2021-44713Acrobat Reader DC version 21.007.20099 (and earlier), 20.004…5.5
• CVE-2021-44715Acrobat Reader DC version 21.007.20099 (and earlier), 20.004…5.5
• CVE-2021-44716net/http in Go before 1.16.12 and 1.17.x before 1.17.5 allow…7.5
• CVE-2021-44717Go before 1.16.12 and 1.17.x before 1.17.5 on UNIX allows wr…4.8
• CVE-2021-44718wolfSSL through 5.0.0 allows an attacker to cause a denial o…5.9
• CVE-2021-44719Docker Desktop 4.3.0 has Incorrect Access Control.8.4
• CVE-2021-4472The mistral-dashboard plugin for openstack has a local file …6.5